Bump [email protected], [email protected], added sonar workflow

Author: petruki

.github/workflows/master.yml

@@ -10,7 +10,6 @@ jobs:
   build-test:
     name: Build & Test
     runs-on: ubuntu-latest
-    if: "! contains(toJSON(github.event.commits.*.message), '[skip ci]')"
     concurrency: ci-${{ github.ref }}
 
     steps:
@@ -53,6 +52,7 @@ jobs:
         uses: sonarsource/[email protected]
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        if: env.SONAR_TOKEN != ''
 
   docker:
     name: Publish Docker Image

.github/workflows/sonar.yml

@@ -0,0 +1,75 @@
+name: Manual SonarCloud Analysis
+
+on:
+  workflow_dispatch:
+    inputs:
+      pr_id:
+        description: 'Pull Request ID to analyze'
+        required: true
+        type: string
+
+jobs:
+  sonar-analysis:
+    name: SonarCloud Analysis for PR
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Get PR details
+        id: pr
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const pr = await github.rest.pulls.get({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: ${{ inputs.pr_id }}
+            });
+            core.setOutput('head_ref', pr.data.head.ref);
+            core.setOutput('base_ref', pr.data.base.ref);
+            core.setOutput('head_sha', pr.data.head.sha);
+
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ steps.pr.outputs.head_sha }}
+          fetch-depth: 0
+
+      - name: Use Node.js 22.x
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Start MongoDB
+        uses: supercharge/[email protected]
+        with:
+          mongodb-version: 8.0
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Run tests
+        run: npm test
+        env:
+          NODE_OPTIONS: "--experimental-vm-modules"
+          MONGODB_URI: mongodb://127.0.0.1:27017/switcher-api-test
+          JWT_CLIENT_TOKEN_EXP_TIME: 5m
+          JWT_SECRET: ${{ secrets.JWT_SECRET }}
+          RELAY_BYPASS_HTTPS: true
+          RELAY_BYPASS_VERIFICATION: true
+          METRICS_ACTIVATED: true
+          MAX_REQUEST_PER_MINUTE: 0
+          SWITCHER_API_ENABLE: false
+          SWITCHER_API_LOGGER: false
+
+      - name: SonarCloud Scan
+        uses: sonarsource/[email protected]
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        if: env.SONAR_TOKEN != ''
+        with:
+          args: >
+            -Dsonar.pullrequest.key=${{ inputs.pr_id }}
+            -Dsonar.pullrequest.branch=${{ steps.pr.outputs.head_ref }}
+            -Dsonar.pullrequest.base=${{ steps.pr.outputs.base_ref }}