Add sonar to project for quality checks

Author: ArBridgeman

.github/workflows/ci.yml

@@ -22,5 +22,6 @@ jobs:
   Metrics:
     needs: [ CI ]
     uses: ./.github/workflows/report.yml
+    secrets: inherit
     permissions:
       contents: read

.github/workflows/report.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Copy Artifacts into Root Folder
         working-directory: ./artifacts
         run: |
-          poetry run -- coverage combine --keep coverage-python3.9*/.coverage
+          poetry run -- coverage combine --keep coverage-python*/.coverage
           # Errors during copying are ignored because they are checked in the next step
           cp .coverage ../ || true
           cp lint-python3.9/.lint.txt ../ || true
@@ -42,6 +42,17 @@ jobs:
       - name: Generate Report
         run: poetry run -- nox -s project:report -- --format json | tee metrics.json
 
+      - name: Prepare files for sonar
+        run: |
+          poetry run -- coverage xml -o ci-coverage.xml --include="exasol/toolbox/*"
+
+      - name: Upload to sonar
+        run: |
+          poetry run -- pysonar --sonar-token ${{ secrets.SONAR_TOKEN }} \
+          --sonar-python-coverage-report-paths ci-coverage.xml \
+          --sonar-python-pylint-report-path .lint.json \
+          --sonar-python-mypy-report-paths .security.json
+
       - name: Upload Artifacts
         uses: actions/[email protected]
         with:

.gitignore

@@ -7,6 +7,7 @@ odbcconfig/odbcinst.ini
 .html-documentation
 
 .coverage
+.sonar
 
 _build/
 

doc/changes/unreleased.md

@@ -17,6 +17,7 @@ pyupgrade_args = ("--py310-plus",)
 ## ✨ Features
 
 * [#441](https://github.com/exasol/python-toolbox/issues/441): Switched nox task for `version:check` to use the config value of `version_file` to specify the location of the `version.py`
+* [#451](https://github.com/exasol/python-toolbox/issues/451): Added Sonar to project for quality checks
 
 ## ⚒️ Refactorings