Repository navigation

Sonar

chore(deps): Bump axios from 1.18.1 to 1.20.0 #141

	name: Sonar

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	scan:
	if: github.event_name != 'pull_request' \|\| github.event.pull_request.draft == false
	name: SonarCloud scan
	runs-on: ubuntu-latest
	timeout-minutes: 10
	permissions:
	contents: read
	steps:
	- name: Checkout
	uses: actions/checkout@v7
	with:
	fetch-depth: 0

	- name: Set up Node
	uses: actions/setup-node@v7
	with:
	node-version: 24
	cache: npm

	- name: Install
	run: npm ci

	# Sonar reads coverage from a report; it does not run the tests itself. Without
	# this step the scan lands with 0% coverage and the gate fails on a number no
	# change in this repo could move.
	- name: Unit tests with coverage
	run: npm test

	- name: SonarCloud scan
	uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

	- name: SonarCloud quality gate
	uses: SonarSource/sonarqube-quality-gate-action@7a5fffe8e523c40e0c740b6bc2712ab503e52efa # v1.2.1
	timeout-minutes: 5
	env:
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}