We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent fd68da8 commit fb432efCopy full SHA for fb432ef
2 files changed
.github/workflows/rust-sbom.yml
@@ -47,3 +47,12 @@ jobs:
47
with:
48
name: sonar-report
49
path: apps/dev_cli/dev_cli.cdx.json
50
+ - name: Push to DepTrack
51
+ uses: DependencyTrack/gh-upload-sbom@v3
52
+ with:
53
+ serverhostname: ${{ secrets.DEPENDENCYTRACK_SERVERHOSTNAME }}
54
+ apikey: ${{ secrets.DEPENDENCYTRACK_APIKEY }}
55
+ projectname: "DevCli"
56
+ projectversion: "main"
57
+ bomfilename: "apps/dev_cli/dev_cli.cdx.json"
58
+ project: aea9514f-95b7-45df-baec-2a761c6139c3
.github/workflows/rust-sonar.yml
@@ -54,3 +54,8 @@ jobs:
path: sonar-issues.json
+ - name: SonarQube Scan
+ uses: SonarSource/sonarqube-scan-action@v4
59
+ env:
60
+ SONAR_TOKEN: ${{ secrets.SONARQUBE_KEY }}
61
+ SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST }}
0 commit comments