continuity/.gitea/workflows/server.yaml

name: Test if Server can be built
run-name: ${{ gitea.actor }} is building the Server application
on: [ push ]

jobs:
  build-server:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Setup dotnet
        uses: https://github.com/actions/setup-dotnet@v3
        with:
          dotnet-version: 7.0
      - name: Install dependencies
        run: dotnet restore
      - name: Build
        run: |
          dotnet build Server -c Release
      #         dotnet test Server.Tests -c Release
  sonarqube:
    needs: build-server
    runs-on: ubuntu-latest
    if: gitea.ref == 'refs/heads/master'
    steps:
      - uses: actions/checkout@v3
      - name: Setup dotnet
        uses: https://github.com/actions/setup-dotnet@v3
        with:
          dotnet-version: 7.0
      - name: Install dependencies
        run: |
          dotnet restore
          echo "::add-path::$HOME/.dotnet/tools"
      - name: Setup Sonarqube Dependencies
        run: |
          apt-get update
          apt-get install --yes openjdk-11-jre
          dotnet tool install --global dotnet-sonarscanner
          dotnet tool install --global dotnet-coverage
      - name: Sonarqube Begin
        run: |
          dotnet sonarscanner begin /key:"${{ secrets.SONAR_PROJECT_KEY }}" /d:sonar.token="${{ secrets.SONAR_TOKEN }}" /d:sonar.host.url="${{ secrets.SONAR_HOST_URL }}"
      - name: Sonarqube Scan
        run: |
          dotnet build Server -c Release
      #         dotnet test --collect "Code Coverage" --logger trx --results-directory "TestsResults"
      #         dotnet-coverage collect 'dotnet test' -f xml  -o 'coverage.xml'
      - name: Sonarqube End
        run: |
          dotnet sonarscanner end /d:sonar.login="${{ secrets.SONAR_TOKEN }}"
  dependency-track:
    needs: build-server
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Setup dotnet
        uses: https://github.com/actions/setup-dotnet@v3
        with:
          dotnet-version: 7.0
      - name: Install dependencies
        run: |
          dotnet restore
          echo "::add-path::$HOME/.dotnet/tools"
      - name: Setup Dependency Track Dependencies
        run: |
          dotnet tool install --global CycloneDX
      - name: Generate SBOM
        run: |
          dotnet CycloneDX Server/Server.csproj -o . -dgl
      - name: Upload SBOM
        uses: https://github.com/DependencyTrack/gh-upload-sbom@v2.0.1
        with:
          apiKey: ${{ secrets.DEPENDENCY_TRACK_API_KEY }}
          serverHostname: ${{ secrets.DEPENDENCY_TRACK_URL }}
          projectName: ${{ secrets.DEPENDENCY_TRACK_PROJECT_NAME }}
          autoCreate: true
          # set projectversion to be the branch name
          projectVersion: "${{ github.ref_name }}"
          bomFilename: "${{ github.workspace }}/bom.xml"
  build-push-server-container:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Setup dotnet
        uses: https://github.com/actions/setup-dotnet@v3
        with:
          dotnet-version: 7.0
      # Add support for more platforms with QEMU (optional)
      # https://github.com/docker/setup-qemu-action
      - name: Set up QEMU
        uses: https://github.com/docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: https://github.com/docker/setup-buildx-action@v3.0.0
      - name: Login to Docker Hub
        uses: https://github.com/docker/login-action@v3
        with:
          registry: forge.rainote.dev
          tags: |
            Wonderking/Continuity:latest
            Wonderking/Continuity:${{ github.ref_name }}
          username: ${{ secrets.REGISTRY_USERNAME }}
          password: ${{ secrets.REGISTRY_TOKEN }}
      - name: Build and push
        uses: https://github.com/docker/build-push-action@v5
        with:
          context: ./Server/
          push: true
          tags: user/repo:latest
          platforms: linux/amd64,linux/arm64,linux/arm/v7
  dependency-track-container:
    needs: build-push-server-container
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Setup dotnet
        uses: https://github.com/actions/setup-dotnet@v3
        with:
          dotnet-version: 7.0
      - name: Install dependencies
        run: |
          dotnet restore
          echo "::add-path::$HOME/.dotnet/tools"
      - name: Setup Dependency Track Dependencies
        run: |
          dotnet tool install --global CycloneDX
      - name: Generate SBOM
        run: |
          docker sbom --format cyclonedx-json --output bom.json forge.rainote.dev/Wonderking/Continuity:latest
      - name: Upload SBOM
        uses: https://github.com/DependencyTrack/gh-upload-sbom@v2.0.1
        with:
          apiKey: ${{ secrets.DEPENDENCY_TRACK_API_KEY }}
          serverHostname: ${{ secrets.DEPENDENCY_TRACK_URL }}
          projectName: "${{ secrets.DEPENDENCY_TRACK_PROJECT_NAME }}-container"
          autoCreate: true
          # set projectversion to be the branch name
          projectVersion: "${{ github.ref_name }}"
          bomFilename: "${{ github.workspace }}/bom.xml"