Add SonarCloud Scan

.github/workflows/build.yaml

@@ -32,11 +32,19 @@ jobs:
           version: latest
 
       - name: Test
-        run: go test ./...
+        run:
+          go test -covermode=atomic -coverpkg=./... -coverprofile=coverage.out
+          -v ./...
 
       - name: Build
         run: go build -o ./yamllint-action .
 
+      - name: SonarCloud Scan
+        uses: SonarSource/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
+
   push:
     name: Push
     needs: test

.gitignore

@@ -2,3 +2,4 @@
 .idea
 dist/
 yamllint-action
+coverage.out

sonar-project.properties

@@ -0,0 +1,20 @@
+sonar.organization=staffbase
+sonar.projectKey=com.staffbase:yamllint-action
+sonar.projectDescription=Yamllint Action
+sonar.links.homepage=https://github.com/Staffbase/yamllint-action
+sonar.sourceEncoding=UTF-8
+
+sonar.scm.provider=git
+
+sonar.sources=.
+# Ignore:
+# - tests
+# - mocks
+# - commandline heavy initialization code (main and cmd)
+# - generated code (pkg/externaldns)
+sonar.exclusions=**/*_test.go
+
+sonar.tests=.
+sonar.test.inclusions=**/*_test.go
+
+sonar.go.coverage.reportPaths=coverage.out