Merging dev into main (#33)

.github/workflows/Publish.yml

@@ -1,6 +1,6 @@
 # This workflow integrates SonarCloud analysis, coverage reporting,
 # CodeQL analysis, SecurityCodeScan, and Codacy Security Scan
-# for code scanning and vulnerability detection.
+# for code scanning and vulnerability detection - and if they all pass, publish
 
 name: Publish Workflow
 
@@ -150,42 +150,42 @@ jobs:
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3
 
-# converting SARIF action not working yet.
+
-  #SecurityCodeScan:
+  SecurityCodeScan:
-  #  runs-on: windows-latest
+    runs-on: windows-latest
-  #  steps:
+    steps:
-  #    - name: Checkout repository
+      - name: Checkout repository
-  #      uses: actions/checkout@v4
+        uses: actions/checkout@v4
-  #      with:
+        with:
-  #        fetch-depth: 0
+          fetch-depth: 0
-#
+
-  #    - name: Setup NuGet
+      - name: Setup NuGet
-  #      uses: nuget/setup-nuget@v1
+        uses: nuget/setup-nuget@v1
-#
+
-  #    - name: Setup MSBuild
+      - name: Setup MSBuild
-  #      uses: microsoft/setup-msbuild@v1
+        uses: microsoft/setup-msbuild@v1
-#
+
-  #    - name: Setup .NET SDK
+      - name: Setup .NET SDK
-  #      uses: actions/setup-dotnet@v3
+        uses: actions/setup-dotnet@v3
-  #      with:
+        with:
-  #        dotnet-version: |
+          dotnet-version: |
-  #          8.x
+            8.x
-  #          3.1.x
+            3.1.x
-  #        dotnet-quality: 'preview'
+          dotnet-quality: 'preview'
-#
+
-  #    - name: Set up projects for analysis
+      - name: Set up projects for analysis
-  #      uses: security-code-scan/security-code-scan-add-action@v1
+        uses: security-code-scan/security-code-scan-add-action@v1
-#
+
-  #    - name: Build
+      - name: Build
-  #      run: |
+        run: |
-  #        dotnet restore
+          dotnet restore
-  #        dotnet build --no-restore --configuration Debug
+          dotnet build --no-restore --configuration Debug
-#
+
-  #    - name: Convert SARIF for uploading to GitHub
+      - name: Convert SARIF for uploading to GitHub
-  #      uses: security-code-scan/security-code-scan-results-action@v1
+        uses: security-code-scan/security-code-scan-results-action@v1
-#
+
-  #    - name: Upload SARIF
+      - name: Upload SARIF
-  #      uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v3
 
   Codacy_Scan:
     runs-on: ubuntu-latest
@@ -304,7 +304,8 @@ jobs:
 
       - name: Push release package to nuget.org
         if: ${{ github.ref == 'refs/heads/main' }}
-        run: dotnet nuget push 'lib/bin/Release/QuanTAlib.*.nupkg' \
+        run: |
+          dotnet nuget push 'lib/bin/Release/QuanTAlib.*.nupkg' \
             --source https://api.nuget.org/v3/index.json \
             --skip-duplicate \
             --api-key ${{ secrets.NUGET_DEPLOY_KEY_QUANTLIB }}

.github/workflows/securitycodescan.yml

@@ -1,57 +0,0 @@
-name: Code Analysis
-
-on:
-  push:         # Triggers on push events to any branch
-  pull_request: # Triggers on pull request events targeting any branch
-  workflow_dispatch: # Allows manual triggering of the workflow
-
-permissions:
-  pull-requests: read  # Allows SonarCloud to decorate PRs with analysis results
-
-jobs:
-  SonarCloud-Analysis:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup .NET 8.0 SDK
-        uses: actions/setup-dotnet@v3
-        with:
-          dotnet-version: '8.0.x'
-
-      - name: SonarCloud Scan
-        uses: SonarSource/sonarcloud-github-action@v2.2.0
-        env:
-          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        with:
-          args: >
-            -Dsonar.projectKey=mihakralj_QuanTAlib
-            -Dsonar.organization=mihakralj
-          projectBaseDir: .
-
-  SecurityCodeScan:
-    runs-on: windows-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: nuget/setup-nuget@v1
-      - uses: microsoft/setup-msbuild@v1
-
-      - name: Setup .NET 8.0 SDK
-        uses: actions/setup-dotnet@v3
-        with:
-          dotnet-version: '8.0.x'
-
-      - name: Set up projects for analysis
-        uses: security-code-scan/security-code-scan-add-action@v1
-
-      - name: Restore dependencies
-        run: dotnet restore
-
-      - name: Build
-        run: dotnet build --no-restore
-
-      - name: Convert SARIF for uploading to GitHub
-        uses: security-code-scan/security-code-scan-results-action@v1
-
-      - name: Upload SARIF
-        uses: github/codeql-action/upload-sarif@v3