wcm-io-devops/Maven Build with SonarCloud
Composite GitHub Action that verifies a Maven Build and analyzes the results in SonarCloud
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| os | Operation system | yes | — |
| java-version | Java version | yes | — |
| java-distribution | Java distribution | no | temurin |
| maven-executable | Maven executable | no | mvn |
| maven-verify-args | Maven goals and command line parameter to verify the build | no | -s ./.maven-settings.xml -Pcontinuous-integration -B -U clean verify |
| maven-sonar-args | Maven goals and command line parameters to execute sonar analysis | no | org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=${{github.repository_owner}}_${{github.event.repository.name}} -Dsonar.projectName=${{github.event.repository.name}} |
| maven-additional-args | Additional maven goals or command line parameters to be added to all maven calls | no | — |
| sonar-run-on-os | Run sonar (only) on this operation system | yes | — |
| sonar-run-on-java-version | Run sonar (only) on this java version | yes | — |
| sonar-token | SONAR_TOKEN secret. This is not available for external PRs, so it may be empty and Sonar is skipped in this case. | no | — |
| github-token | GITHUB_TOKEN secret | yes | — |
Outputs
no outputs