Code Coverage for Sonarcloud

.github/workflows/integrate.yml

@@ -6,7 +6,8 @@ on:
   push:
     branches:
       - "*.*.x"
-  pull_request: null
+  pull_request:
+    types: [opened, synchronize, reopened]
 
 jobs:
   byte_level:
@@ -70,6 +71,8 @@ jobs:
 
       - name: "Checkout code"
         uses: "actions/[email protected]"
+        with:
+          fetch-depth: 0
 
       - name: "Install dependencies"
         uses: "ramsey/composer-install@v2"
@@ -83,13 +86,14 @@ jobs:
       - name: "Execute tests (JS)"
         run: "make js"
 
-  #      - name: Send coverage to Coveralls
-  #        if: "matrix.php-version == '8.1' && matrix.dependencies == 'highest'"
-  #        env:
-  #          COVERALLS_REPO_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-  #        run: |
-  #          wget "https://github.com/php-coveralls/php-coveralls/releases/download/v2.5.2/php-coveralls.phar"
-  #          php ./php-coveralls.phar -v
+      - name: "Fix code coverage paths"
+        run: sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' coverage.xml
+
+      - name: "SonarCloud Scan"
+        uses: "sonarsource/sonarcloud-github-action@master"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
   static_analysis:
     name: "3️⃣ Static Analysis"

Makefile

@@ -40,7 +40,7 @@ ci-mu: vendor ## Mutation tests (for CI/CD only)
 
 .PHONY: ci-cc
 ci-cc: vendor ## Show test coverage rates (for CI/CD only)
-	vendor/bin/phpunit --coverage-text
+	XDEBUG_MODE=coverage vendor/bin/phpunit --coverage-text --coverage-clover=coverage.xml
 
 .PHONY: ci-cs
 ci-cs: vendor ## Check all files using defined ECS rules (for CI/CD only)

sonar-project.properties

@@ -1,3 +1,4 @@
 sonar.organization=web-auth
 sonar.projectKey=web-auth_webauthn-framework
+sonar.php.coverage.reportPaths=coverage.xml
 sonar.sources=.