sonar.yml

name: SonarCloud PR Analysis

on:
  pull_request:
    branches:
      - '**' # Trigger on pull requests targeting any branch

jobs:
  sonarcloud:
    name: Sonar Analysis
    runs-on: ubuntu-latest
    needs: test-build
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0 # Ensure full history is fetched for accurate analysis

      - name: Download coverage artifact
        uses: actions/download-artifact@v4
        with:
          name: coverage
          path: coverage

      - name: SonarCloud Scan
        uses: sonarsource/sonarcloud-github-action@v1.13
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        with:
          args: >
            -Dsonar.pullrequest.key=${{ github.event.pull_request.number }}
            -Dsonar.pullrequest.branch=${{ github.head_ref }}
            -Dsonar.pullrequest.base=${{ github.base_ref }}