Skip to content

Commit

Permalink
Actualizacion
Browse files Browse the repository at this point in the history
  • Loading branch information
rodrigo3829l committed Apr 4, 2024
1 parent 19f6668 commit bd8477a
Showing 1 changed file with 3 additions and 16 deletions.
19 changes: 3 additions & 16 deletions .github/workflows/sonar_scan.yml
Original file line number Diff line number Diff line change
@@ -1,12 +1,3 @@
name: SonarCloud Security Scan

on:
push:
branches:
- main
pull_request:
workflow_dispatch:

jobs:
sonarcloud_security_scan:
name: SonarCloud
Expand All @@ -20,16 +11,12 @@ jobs:
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

- name: Check SonarCloud Quality Gate
- name: Revert if vulnerabilities found
run: |
QUALITY_GATE_STATUS=$(curl -s -u ${{ secrets.SONAR_TOKEN }}: "https://sonarcloud.io/api/qualitygates/project_status?projectKey=rodrigo3829l_db_api_mygarden_llc" | jq -r '.projectStatus.status')
if [[ $QUALITY_GATE_STATUS == "ERROR" ]]; then
echo "SonarCloud Quality Gate failed. Reverting to previous version..."
if [ $? -ne 0 ]; then
echo "Vulnerabilities found. Reverting to previous version..."
git config --global user.email "[email protected]"
git config --global user.name "rodrigo3829l"
git reset --hard HEAD^
git push https://github.com/rodrigo3829l/db_api_mygarden_llc.git --force
else
echo "SonarCloud Quality Gate passed. No vulnerabilities found."
fi

0 comments on commit bd8477a

Please sign in to comment.