Add sonar to project for quality checks

Author: ArBridgeman

.github/workflows/ci.yml

@@ -2,15 +2,16 @@ name: CI
 
 on:
   push:
-    branches-ignore:
-      - "github-pages/*"
-      - "gh-pages/*"
-      - "main"
-      - "master"
+    branches:
+      - main
+      - master
+  pull_request:
+      types: [opened, synchronize, reopened]
   schedule:
     # “At 00:00 on every 7th day-of-month from 1 through 31.” (https://crontab.guru)
     - cron: "0 0 1/7 * *"
 
+
 jobs:
 
   CI:
@@ -22,5 +23,6 @@ jobs:
   Metrics:
     needs: [ CI ]
     uses: ./.github/workflows/report.yml
+    secrets: inherit
     permissions:
       contents: read

.github/workflows/report.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Copy Artifacts into Root Folder
         working-directory: ./artifacts
         run: |
-          poetry run -- coverage combine --keep coverage-python3.9*/.coverage
+          poetry run -- coverage combine --keep coverage-python*/.coverage
           # Errors during copying are ignored because they are checked in the next step
           cp .coverage ../ || true
           cp lint-python3.9/.lint.txt ../ || true
@@ -42,6 +42,18 @@ jobs:
       - name: Generate Report
         run: poetry run -- nox -s project:report -- --format json | tee metrics.json
 
+      - name: Prepare files for sonar
+        run: |
+          poetry run -- coverage xml -o ci-coverage.xml --include="exasol/toolbox/*"
+
+      - name: Upload to sonar
+        run: |
+          poetry run -- pysonar --sonar-token ${{ secrets.SONAR_TOKEN }} \
+          --sonar-branch-name ${{ github.ref_name }} \
+          --sonar-python-coverage-report-paths ci-coverage.xml \
+          --sonar-python-pylint-report-path .lint.json \
+          --sonar-python-mypy-report-paths .security.json
+
       - name: Upload Artifacts
         uses: actions/[email protected]
         with:

.gitignore

@@ -7,6 +7,7 @@ odbcconfig/odbcinst.ini
 .html-documentation
 
 .coverage
+.sonar
 
 _build/