gilles/onvif-go
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: update CI workflows and SonarCloud configuration for enhanced security and coverage reporting

Browse Source 
- Updated SonarCloud exclusions to include CLI tools and examples for better security hotspot analysis.
- Added new issue exclusions for hardcoded IP addresses and credentials in test files and CLI tools.
- Upgraded various GitHub Actions to their latest versions for improved performance and security.
- Streamlined CI workflows by ensuring consistent usage of action versions across all jobs.
This commit is contained in:
0x524a
2025-12-02 23:08:47 -05:00
parent 2c0250d29a
commit 477a6c2927
7 changed files with 68 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sonar-project.properties
+19 -3
View File
@@ -27,12 +27,12 @@ sonar.coverage.exclusions=**/cmd/**,**/examples/**,**/server/**,**/testing/**,**
# Duplications exclusions
sonar.cpd.exclusions=**/*_test.go,**/testdata/**
# Security Hotspot exclusions - skip test files and CI configuration
# Security Hotspot exclusions - skip test files, CI configuration, and CLI tools
# These files don't represent production security concerns
sonar.security.hotspots.exclusions=**/*_test.go,**/testing/**,**/testdata/**,**/.github/**,**/examples/**,**/cmd/**
# Issue exclusions for specific rules in test files
sonar.issue.ignore.multicriteria=e1,e2,e3
# Issue exclusions for specific rules
sonar.issue.ignore.multicriteria=e1,e2,e3,e4,e5,e6,e7
# Ignore security issues in test files
sonar.issue.ignore.multicriteria.e1.ruleKey=go:S5042
@@ -44,3 +44,19 @@ sonar.issue.ignore.multicriteria.e2.resourceKey=**/*_test.go
sonar.issue.ignore.multicriteria.e3.ruleKey=go:S6418
sonar.issue.ignore.multicriteria.e3.resourceKey=**/examples/**
# Ignore hardcoded IP addresses in test files (test IPs like 192.168.x.x are expected)
sonar.issue.ignore.multicriteria.e4.ruleKey=go:S1313
sonar.issue.ignore.multicriteria.e4.resourceKey=**/*_test.go
# Ignore hardcoded IP addresses in CLI tools (example/default IPs for demos)
sonar.issue.ignore.multicriteria.e5.ruleKey=go:S1313
sonar.issue.ignore.multicriteria.e5.resourceKey=**/cmd/**
# Ignore hardcoded IP addresses in examples
sonar.issue.ignore.multicriteria.e6.ruleKey=go:S1313
sonar.issue.ignore.multicriteria.e6.resourceKey=**/examples/**
# Ignore hardcoded credentials in CLI tools (default/demo credentials)
sonar.issue.ignore.multicriteria.e7.ruleKey=go:S6418
sonar.issue.ignore.multicriteria.e7.resourceKey=**/cmd/**