diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml new file mode 100644 index 00000000..368894ce --- /dev/null +++ b/.github/workflows/sonarcloud.yml @@ -0,0 +1,22 @@ +name: SonarCloud Analysis +permissions: + contents: read + pull-requests: read +on: + push: + branches: [main] + pull_request: + branches: [main] +jobs: + sonarcloud: + name: SonarCloud + runs-on: ubuntu-latest + env: + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + steps: + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + with: + fetch-depth: 0 + - name: SonarCloud Scan + if: ${{ env.SONAR_TOKEN != '' }} + uses: SonarSource/sonarqube-scan-action@fd88b7d7ccbaefd23d8f36f73b59db7a3d246602 # v6 diff --git a/sonar-project.properties b/sonar-project.properties new file mode 100644 index 00000000..44b1274c --- /dev/null +++ b/sonar-project.properties @@ -0,0 +1,6 @@ +sonar.projectKey=petry-projects_TalkTerm +sonar.organization=petry-projects +sonar.projectName=TalkTerm +sonar.sources=. +sonar.python.version=3.11 +sonar.exclusions=_bmad-output/**,.claude/**