Sonarcloud Github Action (#452)

* Sonarcloud Github Action

.gitattributes

@@ -20,4 +20,5 @@
 /phpunit.xml.dist export-ignore
 /rector.php export-ignore
 /rollup.config.js export-ignore
+/sonar-project.properties export-ignore
 /tsconfig.json export-ignore

.github/workflows/build.yml

@@ -0,0 +1,20 @@
+on:
+  push:
+    branches:
+      - "*.*.x"
+  pull_request:
+    types: [opened, synchronize, reopened]
+name: SonarCloud Main Workflow
+jobs:
+  sonarcloud:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          # Disabling shallow clone is recommended for improving relevancy of reporting
+          fetch-depth: 0
+      - name: SonarCloud Scan
+        uses: sonarsource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/codeql.yml

@@ -16,7 +16,7 @@ on:
     branches: [ "*.*.x" ]
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: [ "4.6.x" ]
+    branches: [ "4.6.x", "4.7.x" ]
   schedule:
     - cron: '37 10 * * 4'
 

.github/workflows/integrate.yml

@@ -5,7 +5,7 @@ name: "Integrate"
 on:
   push:
     branches:
-      - "*.x"
+      - "*.*.x"
   pull_request: null
 
 jobs:

sonar-project.properties

@@ -0,0 +1,3 @@
+sonar.organization=web-auth
+sonar.projectKey=web-auth_webauthn-framework
+sonar.sources=.