diff --git a/.github/workflows/qa-deprecated-c-cpp.yml b/.github/workflows/qa-deprecated-c-cpp.yml index 0386157..1774ec9 100644 --- a/.github/workflows/qa-deprecated-c-cpp.yml +++ b/.github/workflows/qa-deprecated-c-cpp.yml @@ -88,3 +88,17 @@ jobs: BINARY: ${{ steps.run-action.outputs.build-wrapper-binary }} run: | ("$BINARY" || true) | grep "build-wrapper, version " + + qa-gate: + name: QA Deprecated C and C++ - gate + runs-on: ubuntu-latest + needs: [output-test] + if: always() + steps: + - name: Check all jobs passed + run: | + if [[ "${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}" == "true" ]]; then + echo "One or more required jobs failed or were cancelled." + exit 1 + fi + echo "All checks passed." diff --git a/.github/workflows/qa-install-build-wrapper.yml b/.github/workflows/qa-install-build-wrapper.yml index 4d8afec..c355fa0 100644 --- a/.github/workflows/qa-install-build-wrapper.yml +++ b/.github/workflows/qa-install-build-wrapper.yml @@ -70,3 +70,17 @@ jobs: BINARY: ${{ steps.run-action.outputs.build-wrapper-binary }} run: | ("$BINARY" || true) | grep "build-wrapper, version " + + qa-gate: + name: QA Install Build Wrapper - gate + runs-on: ubuntu-latest + needs: [output-test] + if: always() + steps: + - name: Check all jobs passed + run: | + if [[ "${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}" == "true" ]]; then + echo "One or more required jobs failed or were cancelled." + exit 1 + fi + echo "All checks passed." diff --git a/.github/workflows/qa-main.yml b/.github/workflows/qa-main.yml index 121b5d7..0b1f0b8 100644 --- a/.github/workflows/qa-main.yml +++ b/.github/workflows/qa-main.yml @@ -827,3 +827,40 @@ jobs: run: | echo "Action with invalid scannerVersion should have failed but succeeded" exit 1 + + qa-gate: + name: QA Main - gate + runs-on: ubuntu-latest + needs: + - noInputsTest + - argsInputTest + - argsInputInjectionTest + - backtickCommandInjectionTest + - dollarSymbolCommandInjectionTest + - otherCommandInjectionVariantsTest + - projectBaseDirInputTest + - scannerVersionTest + - scannerBinariesUrlTest + - scannerBinariesUrlIsEscapedWithWget + - scannerBinariesUrlIsEscapedWithCurl + - dontFailGradleTest + - dontFailGradleKotlinTest + - dontFailMavenTest + - runAnalysisTest + - runnerDebugUsedTest + - runAnalysisWithCacheTest + - overrideSonarcloudUrlTest + - curlPerformsRedirect + - useSslCertificate + - analysisWithSslCertificate + - updateTruststoreWhenPresent + - scannerVersionValidationTest + if: always() + steps: + - name: Check all jobs passed + run: | + if [[ "${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}" == "true" ]]; then + echo "One or more required jobs failed or were cancelled." + exit 1 + fi + echo "All checks passed."