skip Sonar if secrets are not accessible

Author: Andreas Wuerl (ext.)

.github/workflows/build.yml

@@ -37,12 +37,20 @@ jobs:
 
       - name: Cache SonarQube packages
         uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        if: ${{ github.secret_source == 'Actions' }}
         with:
           path: ~/.sonar/cache
           key: ${{ runner.os }}-sonar
           restore-keys: ${{ runner.os }}-sonar
 
       - name: Build and analyze
+        if: ${{ github.secret_source == 'None' }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+        run: ./gradlew build jacocoTestReport
+
+      - name: Build and analyze (Sonar)
+        if: ${{ github.secret_source == 'Actions' }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}