Resolve "Integrate dependency-check container with Sonarqube"

Closes #12 (closed)

.gitlab-ci.yml

@@ -4,6 +4,7 @@ stages:
   - test
   - test:npm_install
   - test:dependency_checker
+  - test:sonar-scanner
   - publish
   - security
 
@@ -49,19 +50,43 @@ Test Dependency Checker npm install:
     - cd t/dependency-check/simple-app/
     - npm install
 
+Test Dependency Checker sonar-scanner:
+  stage: test:sonar-scanner
+  image: 
+    name: its-registry.unl.edu/unl-its/docker-ci/static-code-analysis
+  cache:
+    policy: pull
+    paths:
+      - t/dependency-check/simple-app/dependency_check_results/
+  variables:
+    DEPENDENCY_CHECK_OUT_DIR: t/dependency-check/simple-app/dependency_check_results/
+    SRC_DIR: t/dependency-check/simple-app/
+  tags:
+    - docker
+  script:
+    - sonar-scanner -Dsonar.host.url=$SONAR_URL -Dsonar.projectKey=$CI_PROJECT_PATH_SLUG -Dsonar.sources=$SRC_DIR -Dsonar.login=$SONAR_TOKEN -Dsonar.dependencyCheck.reportPath=${DEPENDENCY_CHECK_OUT_DIR}/dependency-check-report.xml -Dsonar.dependencyCheck.htmlReportPath=${DEPENDENCY_CHECK_OUT_DIR}/dependency-check-report.html -Dsonar.scm.disabled=True
+
 Test Dependency Checker dependency_check:
   stage: test:dependency_checker
   image: 
     name: its-registry.unl.edu/unl-its/docker-ci/dependency-check
   cache:
     policy: pull
+    paths:
+      - t/dependency-check/simple-app/dependency_check_results/
   variables:
-    DEPENDENCY_CHECK_OUT_DIR: /tmp/dependency_check_results
+    DEPENDENCY_CHECK_OUT_DIR: t/dependency-check/simple-app/dependency_check_results/
     SRC_DIR: t/dependency-check/simple-app/
   tags:
     - docker
   script:
-    - dependency_check.sh -v
+    - dependency-check --format ALL -s ${SRC_DIR} --out ${DEPENDENCY_CHECK_OUT_DIR} --project ${CI_PROJECT_NAMESPACE} -n
+  artifacts:
+    paths:
+      - t/dependency-check/simple-app/dependency_check_results/dependency-check-report.html
+      - t/dependency-check/simple-app/dependency_check_results/dependency-check-report.xml
+    expire_in: 1 day
+
 
 .Test Dependency Checker:
   stage: test