Consolidate CI into single sonarqube job with all checks

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Serreau Jovann
2026-03-21 13:17:40 +01:00
parent 962bfa5602
commit cddc784c13

View File

@@ -8,118 +8,7 @@ on:
pull_request:
jobs:
php:
runs_on: ubuntu-latest
services:
database:
image: postgres:16-alpine
env:
POSTGRES_USER: app
POSTGRES_PASSWORD: secret
POSTGRES_DB: e_ticket
options: >-
--health-cmd "pg_isready -U app -d e_ticket"
--health-interval 5s
--health-timeout 5s
--health-retries 5
redis:
image: redis:7-alpine
options: >-
--health-cmd "redis-cli ping"
--health-interval 5s
--health-timeout 5s
--health-retries 5
meilisearch:
image: getmeili/meilisearch:latest
env:
MEILI_MASTER_KEY: test
MEILI_ENV: development
env:
DATABASE_URL: "postgresql://app:secret@database:5432/e_ticket?serverVersion=16&charset=utf8"
MESSENGER_TRANSPORT_DSN: "redis://redis:6379/messages"
MAILER_DSN: "null://null"
MEILISEARCH_URL: "http://meilisearch:7700"
MEILISEARCH_API_KEY: "test"
APP_ENV: test
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Setup PHP
uses: shivammathur/setup-php@v2
with:
php-version: '8.4'
extensions: intl, pdo_pgsql, zip, gd, redis, imagick
coverage: xdebug
- name: Install dependencies
run: composer install --no-interaction --prefer-dist
- name: Security audit
run: composer audit
- name: Lint Twig
run: php bin/console lint:twig templates/
- name: Lint YAML
run: php bin/console lint:yaml config/
- name: Lint Container
run: php bin/console lint:container
- name: PHPStan
run: vendor/bin/phpstan analyse src/ --level=6 --no-progress --error-format=json > phpstan-report.json || true
- name: PHP CS Fixer
run: vendor/bin/php-cs-fixer fix --dry-run --diff
- name: Create test database
run: php bin/console doctrine:database:create --env=test --if-not-exists
- name: Create database schema
run: php bin/console doctrine:schema:create --env=test
- name: PHPUnit with coverage
run: vendor/bin/phpunit --testdox --coverage-clover coverage.xml --coverage-text
- name: Hadolint
run: |
wget -qO hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
chmod +x hadolint
./hadolint docker/php/dev/Dockerfile -f json > hadolint-dev.json || true
./hadolint docker/php/prod/Dockerfile -f json > hadolint-prod.json || true
frontend:
runs_on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v3
with:
node-version: '22'
- name: Setup Bun
uses: oven-sh/setup-bun@v1
- name: Install dependencies
run: bun install
- name: ESLint
run: bunx eslint assets/ --ext .js,.ts -f json -o eslint-report.json || true
- name: Stylelint
run: bunx stylelint "assets/**/*.scss"
- name: JS tests with coverage
run: bun run test:coverage
- name: Build assets
run: bun run build
sonarqube:
needs: [php, frontend]
runs_on: ubuntu-latest
services:
database:
@@ -176,12 +65,36 @@ jobs:
- name: Install PHP dependencies
run: composer install --no-interaction --prefer-dist
- name: Security audit
run: composer audit
- name: Lint Twig
run: php bin/console lint:twig templates/
- name: Lint YAML
run: php bin/console lint:yaml config/
- name: Lint Container
run: php bin/console lint:container
- name: PHP CS Fixer
run: vendor/bin/php-cs-fixer fix --dry-run --diff
- name: Install JS dependencies
run: bun install
- name: ESLint report
run: bunx eslint assets/ --ext .js,.ts -f json -o eslint-report.json || true
- name: Stylelint
run: bunx stylelint "assets/**/*.scss"
- name: JS tests with coverage
run: bun run test:coverage
- name: Build assets
run: bun run build
- name: PHPStan report
run: vendor/bin/phpstan analyse src/ --level=6 --no-progress --error-format=json > phpstan-report.json || true
@@ -191,11 +104,8 @@ jobs:
- name: Create database schema
run: php bin/console doctrine:schema:create --env=test
- name: Generate coverage
run: vendor/bin/phpunit --coverage-clover coverage.xml
- name: ESLint report
run: bunx eslint assets/ --ext .js,.ts -f json -o eslint-report.json || true
- name: PHPUnit with coverage
run: vendor/bin/phpunit --testdox --coverage-clover coverage.xml --coverage-text
- name: Hadolint
run: |