Comments (3)
Internal ticket created : CY-6700
from codacy-analysis-cli.
Also here is my GitHub actions file
# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
# This workflow checks out code, performs a Codacy security scan
# and integrates the results with the
# GitHub Advanced Security code scanning feature. For more information on
# the Codacy security scan action usage and parameters, see
# https://github.com/codacy/codacy-analysis-cli-action.
# For more information on Codacy Analysis CLI in general, see
# https://github.com/codacy/codacy-analysis-cli.
name: Codacy Security Scan
on:
push:
branches: [ "master" ]
pull_request:
# The branches below must be a subset of the branches above
branches: [ "master" ]
schedule:
- cron: '27 12 * * 0'
permissions:
contents: read
jobs:
codacy-security-scan:
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
name: Codacy Security Scan
runs-on: ubuntu-latest
steps:
# Checkout the repository to the GitHub Actions runner
- name: Checkout code
uses: actions/checkout@v3
# Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
- name: Run Codacy Analysis CLI
uses: codacy/codacy-analysis-cli-action@d43127fe38d20c527dc1951ae5aea23148bab738
with:
# Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository
# You can also omit the token and run the tools that support default configurations
project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
verbose: true
output: results.sarif
format: sarif
# Adjust severity of non-security issues
gh-code-scanning-compat: true
# Force 0 exit code to allow SARIF file generation
# This will handover control about PR rejection to the GitHub side
max-allowed-issues: 2147483647
# Upload the SARIF file generated in the previous step
- name: Upload SARIF results file
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: results.sarif
from codacy-analysis-cli.
When I run Spotbug with .codacy.yml configuration file in the repository root
01/14 00:54:31 INFO c.c.a.c.a.AnalyseExecutor:206 - Found local extra configuration for spotbugs 01/14 00:54:31 INFO c.c.a.c.a.AnalyseExecutor:188 - Preparing to run spotbugs with remote configuration
Then 0 result is found.
Why was not the local configuration used?
Command used to run Spotbugs tool (from Jenkins)
sudo codacy-analysis-cli analyze --api-token ****** --provider gh --username **** --project **** --tool spotbugs --allow-network --upload --verbose --skip-uncommitted-files-check --commit-uuid **** --directory pwd
Content of .codacy.yml
engines:
spotbugs:
enabled: true
base_sub_dir: /home/user/workspace/project
modules:
- classesDirectories: [ "module1/build/classes" ]
sourceDirectories: [ "module1/source" ]
When I run sudo codacy-analysis-cli validate-configuration
, I got Could not find Codacy configuration file. Make sure you have a file named like one of .codacy.yaml, .codacy.yml.
even when the .codacy.yml file is in the repository root folder. However, when I run sudo codacy-analysis-cli validate-configuration --directory pwd
, it works
from codacy-analysis-cli.
Related Issues (20)
- . HOT 1
- . HOT 1
- . HOT 1
- . HOT 1
- . HOT 2
- . HOT 1
- . HOT 1
- . HOT 1
- . HOT 6
- [CY-6125] ERROR c.c.a.c.a.CodacyPluginsAnalyser:31 - Failed analysis for pmd HOT 3
- [CY-6627] CODACY_API_BASE_URL environment variable not picked up HOT 2
- [CY-6628] skip-ssl-verification not working as expected HOT 2
- [TS-180] After updating cli to version 7.7.0 and 7.7.1 cli is not working as expected HOT 2
- [TS-181] Error in Makefile uninstall task HOT 1
- [TS-197] QUESTION: How to output an alert with the complete file path? HOT 2
- [TS-324] Upload codacy/codacy-analysis-cli image to Amazon ECR Public Gallery HOT 2
- [TS-434] codacy-analysis-cli validate-configuration does not inform about file not starting with `---` HOT 1
- [TS-439] ERROR. Failed duplication for duplication java.lang.Throwable: Docker exited with code 137 HOT 2
- [TCE-898] Codecy cli analysis error HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from codacy-analysis-cli.