ci: Move clippy and coverage tests jobs to PR workflow trigger (#4835)

Signed-off-by: Ramil Mustafin <[email protected]>

.github/workflows/iroha2-dev-pr.yml

@@ -37,6 +37,31 @@ jobs:
         if: always()
         run: ./scripts/tests/consistency.sh docker-compose
 
+  # exclude: client/tests/integration/
+  with_coverage:
+    runs-on: [self-hosted, Linux, iroha2]
+    container:
+      image: hyperledger/iroha2-ci:nightly-2024-04-18
+    steps:
+      - uses: actions/checkout@v4
+      - uses: Swatinem/rust-cache@v2
+      - name: Run tests, with coverage
+        run: |
+          mold --run cargo test --all-features --no-fail-fast --workspace --exclude iroha
+          mold --run cargo test --all-features --no-fail-fast -p iroha -- --skip integration
+        env:
+          RUSTFLAGS: "-C instrument-coverage"
+          LLVM_PROFILE_FILE: "iroha-%p-%m.profraw"
+      - name: Generate lcov report
+        if: always()
+        run: grcov . --binary-path ./target/debug/ -s . -t lcov --branch --ignore-not-existing --ignore "/client_cli" --ignore "**/main.rs" -o lcov.info
+      - name: Upload lcov report artifact
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: lcov.info
+          path: lcov.info
+
   # include: client/tests/integration/
   # exclude: client/tests/integration/extra_functional
   integration:
@@ -95,6 +120,30 @@ jobs:
           # This context specification is required
           context: .
 
+  workspace_analysis_clippy:
+    runs-on: ubuntu-latest
+    container:
+      image: hyperledger/iroha2-ci:nightly-2024-04-18
+    steps:
+      - uses: actions/checkout@v4
+      - uses: Swatinem/rust-cache@v2
+      - name: Format
+        run: cargo fmt --all -- --check
+      - name: Lints without features
+        if: always()
+        run: cargo clippy --workspace --benches --tests --examples --no-default-features --quiet
+      - name: Lints with all features enabled
+        if: always()
+        run: cargo clippy --workspace --benches --tests --examples --all-features --quiet --message-format=json | tee clippy.json
+      - name: Documentation
+        if: always()
+        run: cargo doc --no-deps --quiet
+      - name: Upload clippy report artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: clippy.json
+          path: clippy.json
+
   torii-api-and-client-cli-tests:
     runs-on: [self-hosted, Linux, iroha2]
     container:

.github/workflows/iroha2-dev-sonar-dojo.yml

@@ -0,0 +1,51 @@
+name: I2::Dev::Sonar-Dojo
+
+on:
+  workflow_run:
+    workflows: ["I2::Dev::Tests"]
+    types: [completed]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.actor }}
+  cancel-in-progress: true
+
+jobs:
+  sonarqube-defectdojo:
+    if: ${{ always() }}
+    needs: [workspace_analysis_clippy, with_coverage]
+    runs-on: ubuntu-latest
+    container:
+      image: hyperledger/iroha2-ci:nightly-2024-04-18
+    steps:
+      - uses: actions/checkout@v4
+      - name: Download clippy and lcov artifact reports
+        uses: actions/download-artifact@v4
+        with:
+          path: lints
+          merge-multiple: true
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: SonarQube
+        uses: sonarsource/sonarqube-scan-action@master
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+        with:
+          args: >
+            -Dcommunity.rust.clippy.reportPaths=lints/clippy.json
+            -Dcommunity.rust.lcov.reportPaths=lints/lcov.info
+      - name: DefectDojo
+        id: defectdojo
+        uses: C4tWithShell/[email protected]
+        with:
+          token: ${{ secrets.DEFECTOJO_TOKEN }}
+          defectdojo_url: ${{ secrets.DEFECTOJO_URL }}
+          product_type: iroha2
+          engagement: ${{ github.ref_name }}
+          tools: "SonarQube API Import,Github Vulnerability Scan"
+          sonar_projectKey: hyperledger:iroha
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          github_repository: ${{ github.repository }}
+          product: ${{ github.repository }}
+          environment: Test
+          reports: '{"Github Vulnerability Scan": "github.json"}'