Add static-analysis

Signed-off-by: Cristian Le <cristian.le@mpsd.mpg.de>

.github/workflows/ci.yaml

@@ -22,8 +22,14 @@ jobs:
     needs: [ pre-commit ]
     uses: ./.github/workflows/step_test.yaml
 
+  static-analysis:
+    needs: [ pre-commit ]
+    uses: ./.github/workflows/step_static-analysis.yaml
+    secrets:
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
   pass:
-    needs: [ pre-commit, tests ]
+    needs: [ pre-commit, tests, static-analysis ]
     runs-on: ubuntu-latest
     steps:
       - name: Check all CI jobs

.github/workflows/step_static-analysis.yaml

@@ -0,0 +1,37 @@
+name: static-analysis
+on:
+  workflow_call:
+    secrets:
+      SONAR_TOKEN:
+        required: true
+jobs:
+  sonar-cloud:
+    name: Analyze with SonarCloud
+    runs-on: ubuntu-latest
+    env:
+      BUILD_WRAPPER_OUT_DIR: build_wrapper_output_directory # Directory where build-wrapper output will be placed
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python for gcovr
+        uses: actions/setup-python@v4
+        with:
+          python-version: 3.x
+      - name: install gcovr
+        run: |
+          pip install gcovr
+      - name: Install sonar-scanner and build-wrapper
+        uses: SonarSource/sonarcloud-github-c-cpp@v2
+      - name: Run cmake/ctest with sonar build-wrapper
+        run: |
+          cmake --preset gcc-ci --fresh -G "Unix Makefiles"
+          build-wrapper-linux-x86-64 --out-dir ${{ env.BUILD_WRAPPER_OUT_DIR }} cmake --build --preset gcc-ci
+          ctest --preset gcc-ci
+          gcovr --sonarqube > coverage.xml
+      - name: Run sonar-scanner
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: |
+          sonar-scanner \
+            --define sonar.cfamily.build-wrapper-output="${{ env.BUILD_WRAPPER_OUT_DIR }}" \
+            --define sonar.coverageReportPaths=coverage.xml

sonar-project.properties

@@ -0,0 +1,5 @@
+sonar.projectKey=LecrisUT_CMake-Template
+sonar.organization=lecris
+
+sonar.projectName="CMake Template"
+sonar.coverage.exclusions=test/**