This repository has been archived by the owner on Aug 12, 2024. It is now read-only.

Merge remote-tracking branch 'origin/update-from-template' into develop #90

	name: Sonar

	on:
	workflow_dispatch:
	push:
	branches: [ develop ]
	paths-ignore:
	- '**.md'
	- 'assets/**'
	- 'config/**'
	pull_request:
	types: [opened, synchronize, reopened]
	paths-ignore:
	- '**.md'
	- 'assets/**'
	- 'config/**'

	env:
	SONARCLOUD_ORG: ${{ github.event.organization.login }}
	SONARCLOUD_HOST: https://sonarcloud.io

	jobs:
	sonar:
	name: SonarCloud Scan
	runs-on: ubuntu-latest
	# Dependabot PRs have no access to secrets (SONAR_TOKEN) -> Ignore them
	if: ${{ github.event_name != 'pull_request' \|\| !startsWith(github.head_ref, 'dependabot/') }}
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis

	- name: Set up JDK
	uses: actions/setup-java@v3
	with:
	distribution: 'temurin'
	java-version: 17

	- name: Cache SonarCloud packages
	uses: actions/cache@v3
	with:
	path: ~/.sonar/cache
	key: ${{ runner.os }}-sonar
	restore-keys: ${{ runner.os }}-sonar

	- name: Cache Maven packages
	uses: actions/cache@v3
	with:
	path: ~/.m2
	key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
	restore-keys: ${{ runner.os }}-m2

	- name: Build with Maven
	run: mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=${{ env.SONARCLOUD_ORG }}_${{ github.event.repository.name }} -Dsonar.organization=${{ env.SONARCLOUD_ORG }} -Dsonar.host.url=${{ env.SONARCLOUD_HOST }}
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback