sonarcloud.yml

name: SonarCloud
on:
  workflow_dispatch:
  push:
    branches:
      - master
      - develop
  pull_request:
    types: [opened, synchronize, reopened]

jobs:
  # Snap
  sonarcloud-snap:
    name: SonarCloud snap
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - uses: nrwl/nx-set-shas@v3
        with:
          main-branch-name: 'develop'
      - name: Install pnpm
        uses: pnpm/action-setup@v2
        with:
          version: 8.6.0
      - uses: actions/setup-node@v3
        with:
          node-version: 18.16.0
          cache: pnpm
      - name: Install dependencies
        run: pnpm install --frozen-lockfile
      - name: Test snap
        run: pnpm nx test:ci @blockchain-lab-um/masca
        env:
          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
      - name: Scan snap
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: packages/snap
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}

  # VC Manager
  sonarcloud-datamanager:
    name: SonarCloud Datamanager
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - uses: nrwl/nx-set-shas@v3
        with:
          main-branch-name: 'develop'
      - name: Install pnpm
        uses: pnpm/action-setup@v2
        with:
          version: 8.6.0
      - uses: actions/setup-node@v3
        with:
          node-version: 18.16.0
          cache: pnpm
      - name: Install dependencies
        run: pnpm install --frozen-lockfile
      - name: Test snap
        run: pnpm nx test:ci @blockchain-lab-um/veramo-datamanager
        env:
          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
      - name: Scan Datamanager
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: packages/datamanager
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}

  # OIDC Issuer
  sonarcloud-OIDC-Issuer:
    name: SonarCloud OIDC Issuer
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - uses: nrwl/nx-set-shas@v3
        with:
          main-branch-name: 'develop'
      - name: Install pnpm
        uses: pnpm/action-setup@v2
        with:
          version: 8.6.0
      - uses: actions/setup-node@v3
        with:
          node-version: 18.16.0
          cache: pnpm
      - name: Install dependencies
        run: pnpm install --frozen-lockfile
      - name: Test OIDC Issuer
        run: pnpm nx test:ci @blockchain-lab-um/oidc-issuer
        env:
          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
      - name: Scan OIDC Issuer
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: apps/oidc/issuer
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}

  # OIDC Verifier
  sonarcloud-OIDC-Verifier:
    name: SonarCloud OIDC Verifier
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - uses: nrwl/nx-set-shas@v3
        with:
          main-branch-name: 'develop'
      - name: Install pnpm
        uses: pnpm/action-setup@v2
        with:
          version: 8.6.0
      - uses: actions/setup-node@v3
        with:
          node-version: 18.16.0
          cache: pnpm
      - name: Install dependencies
        run: pnpm install --frozen-lockfile
      - name: Test OIDC Verifier
        run: pnpm nx test:ci @blockchain-lab-um/oidc-verifier
        env:
          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
      - name: Scan OIDC Verifier
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: apps/oidc/verifier
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}

  # OIDC RP Plugin
  sonarcloud-OIDC-RP-Plugin:
    name: SonarCloud RP Plugin
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - uses: nrwl/nx-set-shas@v3
        with:
          main-branch-name: 'develop'
      - name: Install pnpm
        uses: pnpm/action-setup@v2
        with:
          version: 8.6.0
      - uses: actions/setup-node@v3
        with:
          node-version: 18.16.0
          cache: pnpm
      - name: Install dependencies
        run: pnpm install --frozen-lockfile
      - name: Test OIDC RP Plugin
        run: pnpm nx test:ci @blockchain-lab-um/oidc-rp-plugin
        env:
          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
      - name: Scan OIDC RP Plugin
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: libs/oidc/rp-plugin
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}

  # Connector
  sonarcloud-connector:
    name: SonarCloud connector
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - name: Scan connector
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: packages/connector
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}

  # Dapp
  sonarcloud-dapp:
    name: SonarCloud dapp
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - name: Scan dapp
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: packages/dapp
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}

  # Docs
  sonarcloud-docs:
    name: SonarCloud docs
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - name: Scan docs
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: packages/docs
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}

  # Did-provider-key
  sonarcloud-did-provider-key:
    name: SonarCloud did-provider-key
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - uses: nrwl/nx-set-shas@v3
        with:
          main-branch-name: 'develop'
      - name: Install pnpm
        uses: pnpm/action-setup@v2
        with:
          version: 8.6.0
      - uses: actions/setup-node@v3
        with:
          node-version: 18.16.0
          cache: pnpm
      - name: Install dependencies
        run: pnpm install --frozen-lockfile
      - name: Test snap
        run: pnpm nx test:ci @blockchain-lab-um/did-provider-key
        env:
          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
      - name: Scan snap
        uses: SonarSource/sonarcloud-github-action@master
        with:
          projectBaseDir: libs/did-provider-key
          args: >
            -Dsonar.organization=blockchain-lab-um
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}