From c01ba3a669558a348058645ac0d58cd47ea9664f Mon Sep 17 00:00:00 2001 From: Anil Belur Date: Fri, 9 May 2025 07:44:12 +1000 Subject: [PATCH] CI: Add Nexus IQ scan to o-du/l2 Issue: IT-28096 Change-Id: I830db2e2fd3213b892b5997d3f348fa3c80832d3 Signed-off-by: Anil Belur --- .github/workflows/gerrit-novote-merge.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/gerrit-novote-merge.yaml b/.github/workflows/gerrit-novote-merge.yaml index 89259f4f6..a97760c5f 100644 --- a/.github/workflows/gerrit-novote-merge.yaml +++ b/.github/workflows/gerrit-novote-merge.yaml @@ -82,9 +82,17 @@ jobs: build_wrapper_url: "https://raw.githubusercontent.com/o-ran-sc/o-du-l2/refs/heads/main/sonarqube-cloud-build.sh" build_wrapper_out_dir: build/odu/bin/ + call-sonartype-lifecycle: + name: "Sonatype Lifecycle Scan" + needs: notify + # yamllint disable-line rule:line-length + uses: lfit/releng-reusable-workflows/.github/workflows/reuse-sonatype-lifecycle.yaml@ac846b1cfeaf3a7cac6f28413a5206afc9951464 # v0.2.11 + secrets: + NEXUS_IQ_PASSWORD: ${{ secrets.NEXUS_IQ_PASSWORD }} + report-status: if: ${{ always() }} - needs: [notify, call-cmake-sonarqube-cloud] + needs: [notify, call-cmake-sonarqube-cloud, call-sonartype-lifecycle] runs-on: ubuntu-latest steps: - name: Get workflow conclusion -- 2.16.6