Merge pull request #9 from soat-tech-challenge/feat/maven-sonar

feat(maven): add sonar

Author: g-otn

.github/workflows/maven-and-docker-build.yml

@@ -18,8 +18,26 @@ jobs:
           distribution: "liberica"
           cache: "maven"
 
+      - name: Cache SonarCloud packages
+        uses: actions/cache@v3
+        with:
+          path: ~/.sonar/cache
+          key: ${{ runner.os }}-sonar
+          restore-keys: ${{ runner.os }}-sonar
+
       - name: Verify with Maven
-        run: mvn verify -B -P prod "-Dstyle.color=always"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: |
+          # Replace '/' with '_' to get project key
+          PROJECT_KEY=${${{ github.repository }}//\//_}
+
+          mvn verify -B -P prod "-Dstyle.color=always" \
+            org.sonarsource.scanner.maven:sonar-maven-plugin:sonar \
+            -Dsonar.host.url="https://sonarcloud.io" \
+            -Dsonar.organization=${{ github.repository_owner }} \
+            -Dsonar.projectKey=$PROJECT_KEY
 
       - name: Build and push
         uses: docker/build-push-action@v5