diff --git a/.github/workflows/Publish.yml b/.github/workflows/Publish.yml index eba02b78..69db0153 100644 --- a/.github/workflows/Publish.yml +++ b/.github/workflows/Publish.yml @@ -108,9 +108,24 @@ jobs: - name: Build run: dotnet build --no-restore --configuration Debug + - name: Run Codacy Analysis CLI + uses: codacy/codacy-analysis-cli-action@v4 + with: + project-token: ${{ secrets.CODACY_PROJECT_TOKEN }} + verbose: true + output: results.sarif + format: sarif + gh-code-scanning-compat: true + max-allowed-issues: 2147483647 + - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v3 + - name: Upload SARIF results file + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: results.sarif + SecurityCodeScan: runs-on: windows-latest @@ -148,35 +163,9 @@ jobs: - name: Upload SARIF uses: github/codeql-action/upload-sarif@v3 - Codacy_Scan: - runs-on: ubuntu-latest - permissions: - contents: read - security-events: write - actions: read - steps: - - name: Checkout code - uses: actions/checkout@v4 - with: - fetch-depth: 0 - - - name: Run Codacy Analysis CLI - uses: codacy/codacy-analysis-cli-action@v4 - with: - project-token: ${{ secrets.CODACY_PROJECT_TOKEN }} - verbose: true - output: results.sarif - format: sarif - gh-code-scanning-compat: true - max-allowed-issues: 2147483647 - - - name: Upload SARIF results file - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: results.sarif build_publish: - needs: [Code_Coverage, CodeQL, Codacy_Scan, SecurityCodeScan] + needs: [Code_Coverage, CodeQL, SecurityCodeScan] if: | success() && (github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/dev')) || diff --git a/.sonarlint/QuanTAlib.json b/.sonarlint/QuanTAlib.json index c44cece3..f75a1bc1 100644 --- a/.sonarlint/QuanTAlib.json +++ b/.sonarlint/QuanTAlib.json @@ -1,4 +1,4 @@ { - "sonarCloudOrganization": "mihakralj", + "sonarCloudOrganization": "mihakralj-quantalib", "projectKey": "mihakralj_QuanTAlib" } \ No newline at end of file diff --git a/.vscode/settings.json b/.vscode/settings.json index 75b2bf41..dbbc4e17 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -7,11 +7,11 @@ } ], "sarif-viewer.connectToGithubCodeScanning": "on", + "dotnet.dotnetPath": "C:/Program Files/dotnet", + "omnisharp.useModernNet": true, + "omnisharp.sdkPath": "C:/Program Files/dotnet/sdk", "sonarlint.connectedMode.project": { "connectionId": "mihakralj", "projectKey": "mihakralj_QuanTAlib" - }, - "dotnet.dotnetPath": "C:/Program Files/dotnet", - "omnisharp.useModernNet": true, - "omnisharp.sdkPath": "C:/Program Files/dotnet/sdk" + } } \ No newline at end of file diff --git a/Directory.Build.props b/Directory.Build.props index d9353501..df85d4db 100644 --- a/Directory.Build.props +++ b/Directory.Build.props @@ -42,6 +42,9 @@ true false true + + + S1944,S2053,S2222,S2259,S2583,S2589,S3329,S3655,S3900,S3949,S3966,S4158,S4347,S5773,S6781