[Misc] Enable sonar coverage (#15)

.github/workflows/ci.yml

@@ -15,12 +15,35 @@ jobs:
       matrix:
         node-version: [20.x, 18.x]
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v2
+      uses: actions/setup-node@v4
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm i -g @sap/cds-dk
     - run: npm i
     - run: cds v
-    - run: npm run test
+    - run: npm run test
+
+  analysis:
+    name: Analyze with Sonar Cloud
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+    - name: Check out code for Sonar Analysis
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+    - uses: actions/setup-node@v4
+      with:
+        node-version: 20
+    - name: run coverage tests
+      run: |
+        npm i -g @sap/cds-dk
+        npm i
+        npm run test-coverage-lcov
+    - name: SonarCloud Scan
+      uses: SonarSource/sonarcloud-github-action@master
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/release.yml

@@ -11,8 +11,8 @@ jobs:
     runs-on: ubuntu-latest
     environment: npm
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-node@v3
+    - uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
       with:
         node-version: 20
         registry-url: https://registry.npmjs.org/

sonar-project.properties

@@ -0,0 +1,8 @@
+sonar.projectKey=cap-js_cap-operator-plugin
+sonar.organization=cap-js
+
+sonar.language=js
+
+sonar.sources=lib,bin
+sonar.exclusions=**/node_modules/**,**/files/**,**/hack/**,cds-plugin.js,**/test/**
+sonar.tests=test