**THIS REPOSITORY IS NO LONGER ACTIVE. PLEASE USE https://github.com/codiga/github-action **

Code Inspector GitHub Action

What is it?

The Code Inspector GitHub action allows you to check if your code meets quality criteria. When a commit is triggered, Code Inspector checks the quality of the source code according to your own metrics threshold.

The action lets you customize the number of metrics based on

• Aggregates (code quality score or grade)
• Defects (code smells detected by static analyzers)
• Complex functions (using cyclomatic complexity)
• Long functions (functions with more than 50 lines of code)

How to use it?

Step 1: Get your Code Inspector API Token

Sign up on Code Inspector.

In the top right menu go to API token

Create a token and save it.

Step 2: Configure your Code Inspector API Token in your GitHub repository

You need to add your Code Inspector API Token into GitHub.

On GitHub, go in your repository settings, click on the secret Secrets (on the right) and create a new secret.

Create a secret called CODE_INSPECTOR_API_TOKEN and set it to the value of the API token generated at the previous step.

Once the secret is created, the secrets page will look as follow.

Step 3: Configure the GitHub action

Create a file .github/workflows/main.yml and insert the following content.

on: [push]

jobs:
  check-quality:
    runs-on: ubuntu-latest
    name: A job to check my code quality
    steps:
    - name: Check code meets quality standards
      id: code-inspector
      uses: codeinspectorio/github-action@master
      with:
        repo_token: ${{ secrets.GITHUB_TOKEN }}
        code_inspector_api_token: ${{ secrets.CODE_INSPECTOR_API_TOKEN }}
        force_ref: 'none'
        min_quality_grade: 'WARNING'
        min_quality_score: '50'
        max_defects_rate: '0.0001'
        max_complex_functions_rate: '0.0001'
        max_long_functions_rate: '0.0001'
        project_name: ''
        max_timeout_sec: '600'

The following parameters should NOT be changed:

• repo_token: this is how Code Inspector can access your repository
• code_inspector_api_token: this is how the action can communicate with the Code Inspector analysis engine.

The following parameters can be changed:

• force_branch is used to force the branch being checked. Use 'none' if you want to analyze the current branch.
• min_quality_grade: the minimum grade your project should have. Valid values are: EXCELLENT, GOOD, NEUTRAL, WARNING, CRITICAL
• min_quality_score: the minimum code quality score your project should have. This is a value between 0 and 100.
• max_defects_rate: the number of defects per line of code. For example, the value 0.001 means 1 defect per 1000 lines of codes.
• max_complex_functions_rate: the rate of complex functions (e.g. functions with high cyclomatic complexity). For example, a value of 0.5 means that the code should not have more than 50% of functions with high complexity.
• max_long_functions_rate: the rate of long functions (e.g. functions that are too long to be correctly read by developers). For example, a value of 0.4 means that the code should not have more than 40% of long functions.
• project_name: the name of the project on Code Inspector. This argument is optional: if you set a project name, the analysis engine will use the preferences of this project. Leave blank for not using a project.
• max_timeout_sec: how many seconds the analysis should come back to you. Default is 600 secconds (10 minutes.)

Step 4: Enjoy while drinking ☕

Everything is set up 🎉

Add a new commit and the Code Inspector engine will check if the new code meets your criteria.

To visualize the results details, you can use the frontend, our command-line client or use directly our API.

Automated Code Reviews

This GitHub action is about checking the code quality at every commit or pull request. If you want to have automated Code Reviews, Code Inspector supports automated code reviews with its GitHub app.

Contact and bug reports

Feel free to open an issue on this GitHub project. If you have questions related to Code Inspector itself, please contact the support team