Build

deps: bump the cargo-patch-and-minor group across 1 directory with 8 updates #187

	name: Build
	on:
	push:
	branches:
	- main
	pull_request:
	types: [opened, synchronize, reopened]

	permissions: read-all

	jobs:
	sonarqube:
	name: SonarQube
	runs-on: ubuntu-latest
	container:
	image: archlinux:latest
	permissions:
	contents: read
	steps:
	- name: Install system dependencies
	# Full upgrade first, then install — Arch disallows partial upgrades.
	run: \|
	pacman -Syu --noconfirm
	pacman -S --noconfirm --needed gtk4 libadwaita glib2 pkgconf base-devel libsecret git jre-openjdk-headless unzip curl libheif cmake nasm

	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis

	- name: Set up Rust
	uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
	with:
	toolchain: stable
	components: clippy

	- name: Cache Rust artifacts
	uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1

	- name: Run Clippy and capture JSON report
	run: cargo clippy --all-targets --message-format=json > clippy-report.json
	continue-on-error: true

	- name: SonarQube Scan
	env:
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	SONAR_HOST_URL: https://sonarcloud.io
	SONAR_SCANNER_VERSION: 8.1.0.6389
	run: \|
	curl -sSLo sonar-scanner.zip \
	"https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-${SONAR_SCANNER_VERSION}-linux-x64.zip"
	unzip -q sonar-scanner.zip
	"./sonar-scanner-${SONAR_SCANNER_VERSION}-linux-x64/bin/sonar-scanner"

Navigation Menu