cd-devsecops/DotNet Build & Sonar Analysis

Build .NET project, run Coverlet for test coverage, and SonarQube analysis

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Feb 11, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: cd-devsecops/comp-action@c344864e2f5e15bbbbe6ad3591dddb113c931809 # v9

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
dotnet-version.NET version to useyes
sln-pathPath to the .sln file to build (e.g., src/MyApp.sln)yes
test-project-pathPath to the test project (.csproj) to run (e.g., test/WMS.UnitTest/WMS.UnitTest.csproj)yes
sonar-project-keySonarQube project keyyes
sonar-tagsComma-separated list of required tags (e.g. projectname=myapp,owner=Manish)yes
test-exclusionsComma-separated list of test case paths to excludeno""

no outputs