@@ -16,13 +16,25 @@ jobs:
16
16
uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # 4.1.6
17
17
with :
18
18
submodules : ' recursive'
19
- - name : Check code meets quality standards
19
+ - name : Check code meets quality standards (production)
20
20
id : datadog-static-analysis
21
21
uses : DataDog/datadog-static-analyzer-github-action@c74aff158c8cc1c3e285660713bcaa5f9c6d696e # v1
22
22
with :
23
- dd_app_key : ${{ secrets.DD_APP_KEY }}
24
- dd_api_key : ${{ secrets.DD_API_KEY }}
25
- dd_site : datad0g.com
23
+ dd_app_key : ${{ secrets.DATADOG_APP_KEY_PROD }}
24
+ dd_api_key : ${{ secrets.DATADOG_API_KEY_PROD }}
25
+ dd_site : " datadoghq.com"
26
+ dd_service : " dd-trace-java"
27
+ dd_env : " ci"
28
+ cpu_count : 2
29
+ enable_performance_statistics : false
30
+ # Also run the static analysis on the staging environment to benefit from the new features not yet released
31
+ - name : Check code meets quality standards (staging)
32
+ id : datadog-static-analysis-staging
33
+ uses : DataDog/datadog-static-analyzer-github-action@c74aff158c8cc1c3e285660713bcaa5f9c6d696e # v1
34
+ with :
35
+ dd_app_key : ${{ secrets.DATADOG_APP_KEY_STAGING }}
36
+ dd_api_key : ${{ secrets.DATADOG_API_KEY_STAGING }}
37
+ dd_site : " datad0g.com"
26
38
dd_service : " dd-trace-java"
27
39
dd_env : " ci"
28
40
cpu_count : 2
@@ -74,15 +86,21 @@ jobs:
74
86
- name : Perform CodeQL Analysis and upload results to GitHub Security tab
75
87
uses : github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
76
88
77
- # For now, CodeQL SARIF results are not supported by Datadog CI
78
- # - name: Upload results to Datadog CI Static Analysis
79
- # run: |
80
- # wget --no-verbose https://github.com/DataDog/datadog-ci/releases/download/v2.42.0/datadog-ci_linux-x64 -O datadog-ci
81
- # chmod +x datadog-ci
82
- # ./datadog-ci sarif upload /home/runner/work/dd-trace-java/results/java.sarif --service dd-trace-java --env ci
83
- # env:
84
- # DD_API_KEY: ${{ secrets.DD_API_KEY }}
85
- # DD_SITE: datad0g.com
89
+ - name : Upload results to Datadog CI Static Analysis
90
+ run : |
91
+ wget --no-verbose https://github.com/DataDog/datadog-ci/releases/latest/download/datadog-ci_linux-x64 -O datadog-ci
92
+ chmod +x datadog-ci
93
+ ./datadog-ci sarif upload /home/runner/work/dd-trace-java/results/java.sarif --service dd-trace-java --env ci
94
+ env :
95
+ DD_API_KEY : ${{ secrets.DATADOG_APP_KEY_PROD }}
96
+ DD_SITE : datadoghq.com
97
+
98
+ - name : Upload results to Datadog Staging CI Static Analysis
99
+ run : |
100
+ ./datadog-ci sarif upload /home/runner/work/dd-trace-java/results/java.sarif --service dd-trace-java --env ci
101
+ env :
102
+ DD_API_KEY : ${{ secrets.DATADOG_API_KEY_STAGING }}
103
+ DD_SITE : datad0g.com
86
104
87
105
trivy :
88
106
name : Analyze changes with Trivy
@@ -152,9 +170,16 @@ jobs:
152
170
153
171
- name : Upload results to Datadog CI Static Analysis
154
172
run : |
155
- wget --no-verbose https://github.com/DataDog/datadog-ci/releases/download/v2.42.0 /datadog-ci_linux-x64 -O datadog-ci
173
+ wget --no-verbose https://github.com/DataDog/datadog-ci/releases/latest/download /datadog-ci_linux-x64 -O datadog-ci
156
174
chmod +x datadog-ci
157
175
./datadog-ci sarif upload trivy-results.sarif --service dd-trace-java --env ci
158
176
env :
159
- DD_API_KEY : ${{ secrets.DD_API_KEY }}
177
+ DD_API_KEY : ${{ secrets.DATADOG_APP_KEY_PROD }}
178
+ DD_SITE : datadoghq.com
179
+
180
+ - name : Upload results to Datadog Staging CI Static Analysis
181
+ run : |
182
+ ./datadog-ci sarif upload trivy-results.sarif --service dd-trace-java --env ci
183
+ env :
184
+ DD_API_KEY : ${{ secrets.DATADOG_API_KEY_STAGING }}
160
185
DD_SITE : datad0g.com
0 commit comments