更新 '.drone.yml'

.drone.yml

@@ -95,7 +95,97 @@ steps:
   commands:
   - mvn compile -DskipTests=true -Dmaven.javadoc.skip=true -B -V
   - echo 'FINISHED!'
-  
+
+
+#- name: build-java-app
+#  image: docker.io/kameshsampath/drone-java-maven-plugin:v1.0.0
+#  pull: if-not-exists
+
+##################################### quality ##################################
+# Sonar 代码质量，包含 FindBugs、PMD等
+
+# Fortity 代码安全扫描 收费
+
+# pom 漏洞扫描
+# SonarQube https://github.com/mibexsoftware/sonar-bitbucket-plugin
+# OWASP ZAP
+# Brakeman
+# CodeClimate
+# Coverity
+# Klocwork
+# PMD
+# SonarLint
+# FindBugs 官网 15年停更
+# 代码规范：Alibaba Java Coding Guidelines、checkStyle
+
+
+
+# https://juejin.cn/post/6844904018297225224
+#- name: sonar-scan
+#    image: newtmitch/sonar-scanner:4.0.0-alpine
+#    environment:
+#    SONAR_TOKEN:
+#    from_secret: sonar_token
+#    GITHUB_ACCESS_TOKEN_FOR_SONARQUBE:
+#    from_secret: github_access_token_for_sonarqube
+#    commands:
+#      - >
+#    sonar-scanner
+#    -Dsonar.host.url=https://sonarqube.company-beta.com/
+#    -Dsonar.login=?SONAR_TOKEN
+#    -Dsonar.projectKey=smcp-service-BE
+#    -Dsonar.projectName=smcp-service-BE
+#    -Dsonar.projectVersion=${DRONE_BUILD_NUMBER}
+#    -Dsonar.sources=src/main/java
+#    -Dsonar.tests=src/test/java
+#    -Dsonar.language=java
+#    -Dsonar.java.coveragePlugin=jacoco
+#    -Dsonar.modules=smcp-api,smcp-web
+#    -Dsonar.java.binaries=target
+#    -Dsonar.projectBaseDir=.
+#    -Dsonar.analysis.mode=preview
+#    -Dsonar.github.repository=Today_Group/SMCP-Service
+#    -Dsonar.github.oauth=?GITHUB_ACCESS_TOKEN_FOR_SONARQUBE
+#    -Dsonar.github.pullRequest=${DRONE_PULL_REQUEST}
+#    -Dsonar.github.disableInlineComments=false
+#    when:
+#    event:
+#      - pull_request
+#    branch:
+#      - develop
+#      
+#      # post sonarscan result back to git PR (not in preview mode)
+#      - name: sonar-scan-feedback
+#    image: newtmitch/sonar-scanner:4.0.0-alpine
+#    environment:
+#    SONAR_TOKEN:
+#    from_secret: sonar_token
+#    GITHUB_ACCESS_TOKEN_FOR_SONARQUBE:
+#    from_secret: github_access_token_for_sonarqube
+#    commands:
+#      - >
+#    sonar-scanner
+#    -Dsonar.host.url=https://sonarqube.company-beta.com/
+#    -Dsonar.login=?SONAR_TOKEN
+#    -Dsonar.projectKey=smcp-service-BE
+#    -Dsonar.projectName=smcp-service-BE
+#    -Dsonar.projectVersion=${DRONE_BUILD_NUMBER}
+#    -Dsonar.sources=src/main/java
+#    -Dsonar.tests=src/test/java
+#    -Dsonar.language=java
+#    -Dsonar.java.coveragePlugin=jacoco
+#    -Dsonar.modules=smcp-api,smcp-web
+#    -Dsonar.java.binaries=target
+#    -Dsonar.projectBaseDir=.
+#    -Dsonar.analysis.gitRepo=Today_Group/SMCP-Service
+#    -Dsonar.analysis.pullRequest=${DRONE_PULL_REQUEST}
+#    when:
+#    event:
+#      - pull_request
+#    branch:
+#      - develop
+##################################### NOTIFY ####################################
+
 - name: 钉钉通知
   image: guoxudongdocker/drone-dingtalk
   settings:
@@ -112,6 +202,14 @@ steps:
     failure_color: FF0000
     message_pic: http://82.157.141.169:16666/avatars/1
     
+#- name: email-notify
+#  image: drillster/drone-email
+#  settings:
+#    host: smtp.some-server.com
+#    username: foo
+#    password: bar
+#    from: drone@your-domain.com    
+    
 - name: wechat notify
   image: lizheming/drone-wechat
   settings: