[Snyk] Upgrade express from 4.17.1 to 4.21.1 #10
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI - Test and SonarQube Analysis | |
| on: | |
| push: | |
| branches: [master] | |
| pull_request: | |
| branches: [master] | |
| jobs: | |
| ci: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Code | |
| uses: actions/checkout@v3 | |
| - name: Set up Node.js | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: 14 | |
| cache: 'npm' | |
| - name: Install Dependencies | |
| run: npm ci | |
| - name: Build the Project | |
| run: npm run build --if-present | |
| - name: Run Unit Tests | |
| run: npm test | |
| - name: Set up JDK 17 (Temurin) | |
| uses: actions/setup-java@v3 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '17' | |
| - name: Install SonarQube Scanner | |
| run: npm install -g sonar-scanner | |
| - name: Run SonarQube Scan | |
| env: | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| run: | | |
| sonar-scanner \ | |
| -Dsonar.projectKey=ArijKouki_tp2devops2 \ | |
| -Dsonar.organization=arijkouki \ | |
| -Dsonar.sources=. \ | |
| -Dsonar.host.url=https://sonarcloud.io \ | |
| -Dsonar.login=$SONAR_TOKEN \ | |
| -Dsonar.branch.name=master | |
| - name: Install Snyk | |
| run: npm install -g snyk | |
| - name: Authenticate Snyk | |
| run: snyk auth ${{ secrets.SNYK_TOKEN }} | |
| - name: Run Snyk Test | |
| run: snyk test --all-projects | |