Workflow for triggering sonarqube

Author: grooverdan

.github/workflows/build.yml

@@ -0,0 +1,35 @@
+name: SonarQube
+on:
+  push:
+    branches:
+      - 11.8-sonarqube
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  build:
+    name: Build and analyze
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          path: src
+          submodules: 'recursive'
+#          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
+      - name: Create build directory
+        run: mkdir build
+      - name: Run CMake
+        run: |
+          docker run --rm \
+            -v ${{ github.workspace }}/src:/src \
+            -w /src \
+            -v ${{ github.workspace }}/build:/build \
+            --user root \
+            quay.io/mariadb-foundation/bb-worker:ubuntu22.04 \
+            cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=1 -B build -S src
+      - name: SonarQube Scan
+        uses: SonarSource/sonarqube-scan-action@v5.2.0
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        with:
+          args: >
+            --define sonar.cfamily.compile-commands="build/compile_commands.json"