CDR-1382 Add sonar support

.github/workflows/build.yml

@@ -2,7 +2,9 @@ name: build
 
 on:
   push:
+    branches: [ develop, release/* ]
   pull_request:
+    branches: [ develop ]
   workflow_dispatch:
 
 jobs:
@@ -25,6 +27,15 @@ jobs:
       - name: Spotless
         run: mvn -B spotless:apply
 
-      - name: Build with Maven
-        run: mvn -B verify
+      - name: Run Checks
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: |
+          mvn clean verify test jacoco:report-aggregate package sonar:sonar \
+            -Dsonar.host.url=https://sonarcloud.io \
+            -Dsonar.organization=ehrbase \
+            -Dsonar.projectKey=ehrbase_openEHR_SDK \
+            -Dsonar.exclusions=test/** \
+            -Dsonar.coverage.exclusions=test/**,test-data/**/*,opt-14/**/*,response-dto/**/* \
+            -Dsonar.coverage.jacoco.xmlReportPaths=${{ github.workspace }}/test-coverage/target/site/jacoco-overall-coverage/jacoco.xml
 

bom/pom.xml

@@ -77,6 +77,7 @@
         <jacoco.version>0.8.11</jacoco.version>
         <threeten-extra.version>1.7.2</threeten-extra.version>
         <jaxb-runtime.version>2.3.9</jaxb-runtime.version>
+        <sonar.scanner.version>3.11.0.3922</sonar.scanner.version>
     </properties>
 
     <distributionManagement>
@@ -454,6 +455,11 @@
                     <artifactId>nexus-staging-maven-plugin</artifactId>
                     <version>${nexus-staging-maven-plugin.version}</version>
                 </plugin>
+                <plugin>
+                    <groupId>org.sonarsource.scanner.maven</groupId>
+                    <artifactId>sonar-maven-plugin</artifactId>
+                    <version>${sonar.scanner.version}</version>
+                </plugin>
             </plugins>
         </pluginManagement>
     </build>