sonar.yml

name: Sonar

on:
  push:
    branches:
      - 'master'

permissions:
  contents: read

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          java-version: '25'
          distribution: 'temurin'
          cache: maven
      - name: Cache SonarCloud packages
        uses: actions/cache@v4
        with:
          path: ~/.sonar/cache
          key: ${{ runner.os }}-sonar
          restore-keys: ${{ runner.os }}-sonar
      - name: Build and analyze
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
          ORCHESTRATOR_SONAR_VERSION: ${{ vars.ORCHESTRATOR_SONAR_VERSION || 'LATEST_RELEASE' }}
        run: >
          mvn clean install -Pci
          -Dsonar.runtimeVersion=$ORCHESTRATOR_SONAR_VERSION
          -Dsonar.scm.use.blame.algorithm=GIT_FILES_BLAME
          -Dsonar.projectKey=integrated-application-development_sonar-delphi
          org.sonarsource.scanner.maven:sonar-maven-plugin:sonar
          --batch-mode --no-transfer-progress