derliebemarcus / homeassistant_teltonika_rms / 28371744954

98%

push

github

add: publish Jenkins external results (#113)

## Summary

Implements #112 while keeping the existing GitHub Actions enabled for
parallel validation.

- modularizes the Jenkins pipeline
- uses the implicitly loaded `jenkins-shared-library` from `main`
- analyzes CodeQL for Python and GitHub Actions
- uploads separate CodeQL SARIF reports to GitHub Code Scanning
- generates and uploads OSV SARIF to GitHub Code Scanning
- uploads pytest coverage to Coveralls using Jenkins credential
`Coveralls`
- publishes the final Jenkins result to Home Assistant through
`ciNotifyHomeAssistant`
- records the first failed stage centrally through `ciWithStageCheck`
- keeps the local 97.1% coverage floor and all existing blocking quality
gates

## Credentials

- `github token`: GitHub checkout, checks and Code Scanning uploads
- `Coveralls`: Coveralls repository token
- `Sonarqube`: existing SonarQube token

## Validation strategy

The existing GitHub Actions remain enabled during validation. `Validate
HACS & Hassfest` remains permanently in GitHub Actions and is not
replaced by Jenkins.

## Current validation

- [x] Runtime dependency consistency
- [x] Lockfile consistency
- [x] HACS validation and Hassfest
- [x] Existing GitHub Actions OSV scan
- [x] Jenkins pipeline bootstrap with implicit shared library
- [x] Home Assistant Jenkins notification
- [x] CodeQL Python SARIF upload
- [x] CodeQL Actions SARIF upload
- [x] OSV SARIF upload
- [x] Coveralls upload and PR association
- [x] Existing self-hosted CI and security gates

Refs #112

15 of 16 new or added lines in 1 file covered. (93.75%)

1980 of 2013 relevant lines covered (98.36%)

0.98 hits per line