name: SonarQube

on:

workflow_dispatch: # Manual trigger

jobs:

build:

name: Build and analyze

runs-on: ubuntu-latest

steps:

# Checkout repository

- name: Checkout code

uses: actions/checkout@v4

with:

fetch-depth: 0 # Needed for Sonar blame info

# Set up Java 17

- name: Set up JDK 17

uses: actions/setup-java@v4

with:

java-version: 17

distribution: 'zulu' # or 'temurin'

# Cache SonarQube packages

- name: Cache SonarQube packages

uses: actions/cache@v4

with:

path: ~/.sonar/cache

key: ${{ runner.os }}-sonar

restore-keys: ${{ runner.os }}-sonar

# Cache Maven dependencies

- name: Cache Maven packages

uses: actions/cache@v4

with:

path: ~/.m2

key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}

restore-keys: ${{ runner.os }}-m2

# Build project and run SonarCloud analysis

- name: Build and analyze

env:

SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

run: mvn clean verify sonar:sonar \

-Dsonar.projectKey=javawebcal \

-Dsonar.organization=${{ secrets.SONAR_ORG }} \

-Dsonar.host.url=https://sonarcloud.io \

-Dsonar.login=${{ secrets.SONAR_TOKEN }}