From 84fa913528de0f341ace323aea28ae5ed387920e Mon Sep 17 00:00:00 2001 From: Marc Rufer Date: Tue, 4 Nov 2025 23:21:37 +0100 Subject: [PATCH 1/2] Fix SonarQube Cloud findings --- .github/workflows/quality.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 947d4ed..13fb5b2 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -58,7 +58,7 @@ jobs: run: | $ErrorActionPreference = "Stop" $PSNativeCommandUseErrorActionPreference = $true - ${{ runner.temp }}\scanner\dotnet-sonarscanner begin /k:"secure-web-apps_EndToEndSecurityWeb" /o:"secure-web-apps" /d:sonar.token="${{ secrets.SONAR_TOKEN }}" /d:sonar.host.url="https://sonarcloud.io" /d:sonar.projectBaseDir="D:\a\EndToEndSecurityWeb\EndToEndSecurityWeb" /d:sonar.cs.vscoveragexml.reportsPaths=coverage.xml /d:sonar.terraform.provider.azure.version=4.49.0 + ${{ runner.temp }}\scanner\dotnet-sonarscanner begin /k:"secure-web-apps_EndToEndSecurityWeb" /o:"secure-web-apps" /d:sonar.token="$env:SONAR_TOKEN" /d:sonar.host.url="https://sonarcloud.io" /d:sonar.projectBaseDir="D:\a\EndToEndSecurityWeb\EndToEndSecurityWeb" /d:sonar.cs.vscoveragexml.reportsPaths=coverage.xml /d:sonar.terraform.provider.azure.version=4.49.0 dotnet build .\Bff.sln --configuration Release dotnet-coverage collect 'dotnet test .\tests\BffMicrosoftEntraID.Server.IntegrationTests.csproj' -f xml -o 'coverage.xml' - ${{ runner.temp }}\scanner\dotnet-sonarscanner end /d:sonar.token="${{ secrets.SONAR_TOKEN }}" + ${{ runner.temp }}\scanner\dotnet-sonarscanner end /d:sonar.token="$env:SONAR_TOKEN" From 44adc76e5016483f732d56d5515c7f313c1f91ad Mon Sep 17 00:00:00 2001 From: Marc Rufer Date: Tue, 4 Nov 2025 23:35:46 +0100 Subject: [PATCH 2/2] Update history --- README.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 902793f..c7d2edd 100644 --- a/README.md +++ b/README.md @@ -88,10 +88,12 @@ ng update @angular/cli @angular/core ## History +- 2025-11-02 Added bootstrap, improved UI (style), created app registration for BFF app using terraform +- 2025-11-01 Added security.txt, added OpenAPI - 2025-10-31 Updated to Angular CLI and Angular 20.3.0, using vite in dev - 2025-10-30 Fixed deployment to Azure App Service, reverted Angular due to CSP nonce issues -- 2025-10-29 Added terraform, sonar SCA, SAST, improved GitHub Actions workflows -- 2025-10-28 Updated frontend packages, added integration tests, added GitHub Actions workflows +- 2025-10-29 Added .NET Aspire, added terraform, Sonar SCA, SAST, improved GitHub Actions workflows +- 2025-10-28 Improved security headers, updated frontend packages, added integration tests, added GitHub Actions workflows - 2025-10-27 Updated NuGet packages - 2025-08-30 Angular 20, updated packages - 2025-01-01 .NET 9, Angular 19