From 49bd491a70b3096f02fe0b366d5402b04ee653cb Mon Sep 17 00:00:00 2001
From: p3t <3204560+p3t@users.noreply.github.com>
Date: Thu, 19 Dec 2024 11:34:55 +0100
Subject: [PATCH] Sonar scan in the build-pipeline

---
 .github/workflows/maven_build.yml | 21 ++++++++++++++++++++-
 pom.xml                           |  2 ++
 2 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/maven_build.yml b/.github/workflows/maven_build.yml
index 063b908..ab75386 100644
--- a/.github/workflows/maven_build.yml
+++ b/.github/workflows/maven_build.yml
@@ -45,6 +45,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Setup JDK
         uses: actions/setup-java@v4
@@ -57,13 +59,30 @@ jobs:
           gpg-private-key: ${{ secrets.GPG_SIGNING_KEY }}
           gpg-passphrase: ${{ secrets.GPG_SIGNING_KEY_PASSWORD }}
 
+      - name: Cache SonarQube packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.sonar/cache
+          key: ${{ runner.os }}-sonar
+          restore-keys: ${{ runner.os }}-sonar
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+
       - name: Set version
         if: ${{ inputs.release_build }}
         run: ./mvnw versions:set -DnewVersion=${{ env.BUILD_VERSION }} -DgenerateBackupPoms=false
 
       - name: Build project, run unit and integration tests
         id: Build
-        run: ./mvnw -T1C --batch-mode clean install
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: ./mvnw -T1C --batch-mode clean install org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=p3t_spring-cursorpaging
 
       - name: Evaluate branch name where the scan results are added to in Sonarcloud
         if: ${{inputs.actor != 'dependabot[bot]' }}
diff --git a/pom.xml b/pom.xml
index e539d1d..4794c3a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -48,6 +48,8 @@
     <mockito.version>5.14.2</mockito.version>
     <delombok.output>${project.build.directory}/delombok</delombok.output>
     <testcontainer.version>1.20.3</testcontainer.version>
+    <sonar.organization>p3t</sonar.organization>
+    <sonar.host.url>https://sonarcloud.io</sonar.host.url>
   </properties>
 
   <dependencyManagement>