duynguyen
22c8593d23
npx sonar-scanner fails on node:18-slim — no Java. Switch to dedicated sonarsource/sonar-scanner-cli container with Java + scanner bundled. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
35 lines
1.4 KiB
Groovy
35 lines
1.4 KiB
Groovy
/**
|
|
* Runs sonar-scanner inside container('sonar') (sonarsource/sonar-scanner-cli).
|
|
* Must be called inside container('sonar') block.
|
|
* Agent pod must be created with homelabK8sAgent(withSonar: true).
|
|
*
|
|
* config keys:
|
|
* projectKey (required) - SonarQube project key
|
|
* sonarUrl (optional) - SonarQube server URL, default: http://sonarqube-sonarqube.sonarqube.svc.cluster.local:9000
|
|
* credId (optional) - Jenkins secret-text credential id, default: sonarqube-token
|
|
* sources (optional) - sources to scan, default: .
|
|
* exclusions (optional) - comma-separated paths to exclude
|
|
*/
|
|
def call(Map config) {
|
|
def projectKey = config.projectKey
|
|
if (!projectKey) error('scanCodeQuality: projectKey is required')
|
|
|
|
def sonarUrl = config.sonarUrl ?: 'http://sonarqube-sonarqube.sonarqube.svc.cluster.local:9000'
|
|
def credId = config.credId ?: 'sonarqube-token'
|
|
def sources = config.sources ?: '.'
|
|
def exclusions = config.exclusions ?: ''
|
|
|
|
def exclusionsArg = exclusions ? "-Dsonar.exclusions=${exclusions}" : ''
|
|
|
|
withCredentials([string(credentialsId: credId, variable: 'SONAR_TOKEN')]) {
|
|
sh """
|
|
sonar-scanner \
|
|
-Dsonar.projectKey=${projectKey} \
|
|
-Dsonar.sources=${sources} \
|
|
-Dsonar.host.url=${sonarUrl} \
|
|
-Dsonar.token=\${SONAR_TOKEN} \
|
|
${exclusionsArg}
|
|
"""
|
|
}
|
|
}
|