Repository navigation

fix(security): add path traversal protection to ID3 importer temp fil… #62

	name: SonarCloud Analysis
	on:
	push:
	branches:
	- main
	- develop
	- feature/*
	pull_request:
	types: [opened, synchronize, reopened]
	jobs:
	sonarcloud:
	name: SonarCloud Scan
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis

	- name: Setup PHP
	uses: shivammathur/setup-php@v2
	with:
	php-version: '8.2'
	coverage: xdebug
	tools: composer

	- name: Install dependencies
	run: composer install --prefer-dist --no-progress

	- name: Create coverage directory
	run: mkdir -p coverage

	- name: Run tests with coverage
	run: \|
	vendor/bin/phpunit \
	--coverage-clover coverage/clover.xml \
	--log-junit coverage/junit.xml

	- name: SonarCloud Scan
	uses: sonarsource/sonarqube-scan-action@v7
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	with:
	args: >
	-Dsonar.projectKey=stephenfeather_sermon-browser
	-Dsonar.organization=stephenfeather
	-Dsonar.php.coverage.reportPaths=coverage/clover.xml
	-Dsonar.php.tests.reportPath=coverage/junit.xml
	-Dsonar.language=php
	-Dsonar.exclusions=vendor/*/,node_modules/*/,tests/*/,.claude/*/,.tldr/*/,opc/*/,thoughts/*/
	-Dsonar.cpd.exclusions=tests/*/
	-Dsonar.issue.ignore.multicriteria=e1
	-Dsonar.issue.ignore.multicriteria.e1.ruleKey=php:S100
	-Dsonar.issue.ignore.multicriteria.e1.resourceKey=*/.php