Merge pull request #58 from AltaPay/sonarqube-workflow

Sonarqube workflow

Author: emicha

.github/workflows/sonarqube-analysis.yml

@@ -0,0 +1,30 @@
+name: SonarQube Analysis
+
+on:
+  push:
+    branches:
+      - "**"
+
+jobs:
+  build:
+    name: Build and analyze
+    runs-on: self-hosted
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: 17
+          distribution: 'temurin'
+
+      - name: Build with Gradle
+        run: ./gradlew clean build
+
+      - name: Run SonarQube analysis
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+        run: ./gradlew sonar --no-daemon

build.gradle

@@ -5,6 +5,7 @@ plugins {
     id "maven-publish"
     id "signing"
     id "org.jreleaser" version "1.20.0"
+    id "org.sonarqube" version "6.0.1.5171"
 }
 
 group = 'com.altapay'
@@ -69,6 +70,24 @@ tasks.register("integrationTest", Test) {
     useJUnitPlatform()
 }
 
+sonar {
+  properties {
+    property "sonar.projectKey", "AltaPay_sdk-java_69a0e28c-3133-48fd-8372-6c73a9cba728"
+    property "sonar.host.url", System.getenv("SONAR_HOST_URL") ?: System.getProperty("sonar.host.url")
+    property "sonar.token", System.getenv("SONAR_TOKEN") ?: System.getProperty("sonar.token")
+    
+    property "sonar.scm.disabled", "true"
+    property "sonar.cpd.exclusions", "**/*"
+    property "sonar.duplications.exclusions", "**/*"
+
+    property "sonar.coverage.exclusions", "**/*"
+    property "sonar.java.coveragePlugin", "none"
+
+    // Fail build if Quality Gate fails
+    property "sonar.qualitygate.wait", "true"
+  }
+}
+
 java {
     toolchain {
         languageVersion = JavaLanguageVersion.of(17)