Merge pull request #34 from imsweb/add-sonarqube

Add Sonarqube analysis

Author: ctmay4

.github/workflows/integration.yml

@@ -2,7 +2,7 @@
 
 name: integration
 
-on: [push, pull_request]
+on: [ push, pull_request ]
 
 jobs:
   build:
@@ -25,9 +25,11 @@ jobs:
             ~/.gradle/wrapper
           key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}
           restore-keys: ${{ runner.os }}-gradle
-      - name: Build and test
-        run: |
-          chmod +x gradlew
-          ./gradlew build --no-daemon
+      - name: Build and analyze
         env:
           SEER_API_KEY: ${{ secrets.SEER_API_KEY }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: |
+          chmod +x gradlew
+          ./gradlew build sonarqube

README.md

@@ -1,4 +1,5 @@
 # seerapi-client-java
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=imsweb_seerapi-client-java&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=imsweb_seerapi-client-java)
 [![integration](https://github.com/imsweb/seerapi-client-java/workflows/integration/badge.svg)](https://github.com/imsweb/seerapi-client-java/actions)
 [![Maven Central](https://maven-badges.herokuapp.com/maven-central/com.imsweb/seerapi-client-java/badge.svg)](https://maven-badges.herokuapp.com/maven-central/com.imsweb/seerapi-client-java)
 

build.gradle

@@ -1,13 +1,15 @@
 plugins {
     id 'java-library'
     id 'checkstyle'
+    id 'jacoco'
     id "com.github.spotbugs" version "5.0.7"
     id 'maven-publish'
     id 'signing'
     id "io.codearte.nexus-staging" version "0.30.0"
     id 'com.adarshr.test-logger' version '3.2.0'
     id "com.github.ben-manes.versions" version "0.42.0"
     id 'org.sonatype.gradle.plugins.scan' version '2.3.0'
+    id "org.sonarqube" version "3.3"
 }
 
 group = 'com.imsweb'
@@ -77,19 +79,18 @@ spotbugs {
     excludeFilter = file('config/spotbugs/spotbugs-exclude.xml')
 }
 
+sonarqube {
+    properties {
+        property "sonar.projectKey", "imsweb_seerapi-client-java"
+        property "sonar.organization", "imsweb"
+        property "sonar.host.url", "https://sonarcloud.io"
+    }
+}
+
 // Nexus vulnerability scan (see https://github.com/sonatype-nexus-community/scan-gradle-plugin)
 ossIndexAudit {
     dependencyGraph = true
     printBanner = false
-
-    // only set proxy if running outside of Github Actions
-    if (!System.getenv().GITHUB_ACTIONS) {
-        proxyConfiguration {
-            protocol = 'http'
-            host = 'webproxy-btp.imsweb.com'
-            port = 8080
-        }
-    }
 }
 
 wrapper {