Bigfoot/.gitea/workflows/sonarqube.yml

name: Bigfoot

on:
  push:
    branches:
      - main
      - Development
  pull_request:
    branches:
      - main
      - Development

jobs:
  build-and-test:
    runs-on: ubuntu-latest
    timeout-minutes: 120
    container:
      image: git.romainboullard.com/bigfootdev/linuxcppbuilder:development

    name: "Sonarqube"
    steps:
      - name: Install Node.js
        run: apt-get update && apt-get install -y nodejs

      - name: Checkout repository
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
          submodules: recursive
          ref: ${{ github.event.pull_request.head.sha || github.sha }}

      - name: Build
        run: |
            conan install . --remote=bigfootpackages -pr:h=./ConanProfiles/host/clang_coverage -pr:b=./ConanProfiles/build/clang  --build=missing -s build_type=Debug -o bigfoot/*:build_tests=True -o bigfoot/*:build_benchmarks=True -o bigfoot/*:tracy=False -o bigfoot/*:toolmode=True -o bigfoot/*:vulkan=True -of build-toolmode
            . ./build-toolmode/build/Debug/generators/conanbuild.sh
            cmake -S . -B ./build-toolmode/Debug --toolchain ./build-toolmode/build/Debug/generators/conan_toolchain.cmake -DCMAKE_BUILD_TYPE=Debug -G "Ninja"
            cmake --build build-toolmode/Debug --parallel $(nproc)
            . ./build-toolmode/build/Debug/generators/deactivate_conanbuild.sh

      - name: Run tests
        run: |
            cd ./build-toolmode/Debug
            . ../../build-toolmode/build/Debug/generators/conanbuild.sh
            LLVM_PROFILE_FILE="%p.profraw%c" xvfb-run ctest --output-on-failure
            . ../../build-toolmode/build/Debug/generators/deactivate_conanbuild.sh

      - name: Clang-Tidy
        run: run-clang-tidy -p ./build-toolmode/Debug/ >> tidy_result.txt

      - name: Infer
        run: infer run --compilation-database build-toolmode/Debug/compile_commands.json

      - name: Generate coverage report
        shell: bash
        run: |
            # gcovr's own LLVM-JSON reader only understands coverage-mapping format
            # 2.x; this image's clang 22 llvm-cov emits format 3.x, which gcovr
            # rejects outright ("Wrong major version"). Bypassing gcovr's JSON
            # path entirely: llvm-cov's lcov exporter is a separate, unaffected
            # code path, so merge -> export lcov -> convert lcov to Cobertura.
            llvm-profdata merge -sparse $(find build-toolmode/Debug -name "*.profraw") -o merged.profdata
            BINARIES=($(find build-toolmode/Debug -maxdepth 8 -type f -executable -iname "*Tests"))
            OBJECT_ARGS=$(printf -- '-object %s ' "${BINARIES[@]:1}")
            llvm-cov export -format=lcov -instr-profile=merged.profdata "${BINARIES[0]}" $OBJECT_ARGS > coverage.lcov
            # lcov_cobertura isn't preinstalled on the image; inject it into
            # gcovr's existing pipx venv and expose its CLI on PATH.
            pipx inject gcovr lcov_cobertura --include-apps
            lcov_cobertura coverage.lcov -b . -o coverage.xml

      - name: SonarQube Scan
        uses: SonarSource/sonarqube-scan-action@v7.0.0
        with:
          args: >
            -Dsonar.cxx.jsonCompilationDatabase=./build-toolmode/Debug/compile_commands.json
            -Dsonar.qualitygate.wait=true
            ${{ github.event_name == 'pull_request' &&
                format('-Dsonar.pullrequest.key={0} -Dsonar.pullrequest.branch={1} -Dsonar.pullrequest.base={2} -Dsonar.analysis.sqbot={3}',
                       github.event.pull_request.number, github.head_ref, github.base_ref, github.event.pull_request.head.sha)
                || format('-Dsonar.branch.name={0}', github.ref_name) }}
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
          SONAR_HOST_URL: ${{ secrets.SONAR_HOST }}