Merge pull request #221 from adela-domokosova/sonarqube-implementation

Add workflows with sonar analysis

Author: pavelhoral

.github/workflows/build-project.yml

@@ -0,0 +1,34 @@
+name: Build project
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        java: [17, 21]
+    name: "Java ${{ matrix.java }} build"
+    steps:
+      - name: Checkout project
+        uses: actions/checkout@v4
+      - name: Set up Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "${{ matrix.java }}"
+          cache: "maven"
+      - name: Verify build
+        run: mvn -B verify
+  sonar:
+    needs: build
+    if: github.base_ref == 'main' && github.event_name == 'pull_request'
+    name: Prepare analysis context
+    uses: WrenSecurity/.github/.github/workflows/sonar-pull-prepare.yml@main
+    with:
+      pull_request: ${{ toJSON(github.event.pull_request) }}

.github/workflows/build.yml

@@ -0,0 +1,30 @@
+name: Trigger Sonar analysis
+
+on:
+  workflow_run:
+    workflows:
+      - Build project
+    types:
+      - completed
+
+permissions:
+  contents: read
+
+jobs:
+  prepare:
+    if: github.event.workflow_run.conclusion == 'success'
+    uses: WrenSecurity/.github/.github/workflows/sonar-prepare.yml@main
+    name: Prepare analysis context
+    with:
+      workflow_run: ${{ toJSON(github.event.workflow_run) }}
+  trigger:
+    needs: prepare
+    if: needs.prepare.outputs.sonar_allowed
+    name: Trigger Sonar analysis
+    uses: WrenSecurity/.github/.github/workflows/sonar-maven.yml@main
+    with:
+      java_version: 21
+      project_key: 'WrenSecurity_wrenam'
+      pull_request: ${{ needs.prepare.outputs.pull_request }}
+    secrets:
+      sonar_token: ${{ secrets.SONAR_TOKEN }}

.github/workflows/sonar-trigger.yml

@@ -22,7 +22,7 @@
     <parent>
         <groupId>org.wrensecurity</groupId>
         <artifactId>wrensec-parent</artifactId>
-        <version>4.0.2</version>
+        <version>4.1.1</version>
         <relativePath />
     </parent>