Merge pull request #213 from InseeFr/GtanSndil-patch-1

Update build.yaml

.github/workflows/build.yaml

@@ -62,6 +62,12 @@ jobs:
           name: app-jar
           path: target/*.jar
 
+      - name: Run Sonar
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: mvn -B clean verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Pcoverage   
+
   docker:
     needs:
       - check-version
@@ -82,4 +88,4 @@ jobs:
           name: inseefr/magma-back-office
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-          tags: "latest, ${{ needs.check-version.outputs.release-version }}"
+          tags: "latest, ${{ needs.check-version.outputs.release-version }}"

.github/workflows/quality.yaml

@@ -0,0 +1,39 @@
+name: Test and Sonar Analysis
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  push:
+    branches:
+      - main
+jobs:
+  test-build:
+    name: build & test & analyze
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
+      - name: Cache SonarCloud packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.sonar/cache
+          key: ${{ runner.os }}-sonar
+          restore-keys: ${{ runner.os }}-sonar
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+      - name: Run unit tests
+        run: mvn -B clean test
+      - name: Run Sonar
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: mvn -X -B clean verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Pcoverage

pom.xml

@@ -25,6 +25,10 @@
         <rdf4j.version>5.0.0-M3</rdf4j.version>
         <springdoc.version>2.3.0</springdoc.version>
         <jacoco.version>0.8.12</jacoco.version>
+
+        <sonar.organization>inseefr</sonar.organization>
+        <sonar.host.url>https://sonarcloud.io</sonar.host.url>
+        <sonar.projectKey>InseeFr_Magma</sonar.projectKey>
     </properties>
 
     <dependencies>