ci.yml

name: Continuous Integration

on: [push]

jobs:
  build:
    runs-on: ubuntu-22.04

    steps:
      - uses: actions/checkout@v3

      - name: Setup .NET Core SDK 6.0.x
        uses: actions/setup-dotnet@v2
        with:
          dotnet-version: 6.0.x

      - name: Install dependencies
        run: dotnet restore Action/PostMediumGitHubAction.sln

      - name: Build
        run: dotnet build Action/PostMediumGitHubAction.sln --configuration Release --no-restore

      - name: Test
        run: dotnet test Action/PostMediumGitHubAction.sln --no-restore

      - name: Upload to SonarQube
        run: |
          dotnet tool install --global dotnet-sonarscanner
          dotnet tool install --global JetBrains.dotCover.GlobalTool
          dotnet sonarscanner begin /k:"philips-software_post-to-medium-action" /d:sonar.host.url="https://sonarcloud.io" /o:"philips-software" /d:sonar.login="${{ secrets.SONAR_TOKEN }}" /d:sonar.cs.dotcover.reportsPaths=dotCover.Output.html
          dotnet build Action/PostMediumGitHubAction.sln
          dotnet dotcover test Action/PostMediumGitHubAction.sln --dcReportType=HTML
          dotnet sonarscanner end /d:sonar.login="${{ secrets.SONAR_TOKEN }}"

      - uses: actions-ecosystem/action-get-latest-tag@v1
        id: get-latest-tag

      - uses: philips-software/sbom-tool-installer-action@v1.0.0

      - name: Generate SBOM
        run: |
          mkdir sbom
          sbom-tool generate -b ./sbom -bc . -ps Philips -pn post-to-medium-action -pv ${{ steps.get-latest-tag.outputs.tag }} -nsb https://github.com/philips-software/post-to-medium-action
      - uses: actions/upload-artifact@v3
        with:
          name: sbom
          path: ./sbom/