feat(SonarQube): add SonarQube to readme #14

	name: "Code Quality Scan"
	# Use tools such as mypy ruf and sonarcloud to check for code quality & code security

	on:
	push:
	branches: [master]
	pull_request:
	types: [opened, synchronize, reopened]
	workflow_dispatch:

	jobs:
	build:
	runs-on: ${{ matrix.os }}
	permissions:
	contents: read
	packages: write
	attestations: write
	id-token: write
	strategy:
	matrix:
	os: [ubuntu-latest]
	env:
	OS: ${{ matrix.os }}
	steps:
	- uses: actions/checkout@master

	- name: Install uv
	uses: astral-sh/setup-uv@v5

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version-file: ".python-version"

	- name: Install the project
	run: uv sync --reinstall --extra test

	- name: Install ruff
	run: uv tool install ruff

	- name: Run Ruff
	run: uvx ruff check --output-format=github .

	# - name: Type Check with Mypy
	# shell: bash
	# run: \|
	# uv run mypy ./src/

	- name: SonarQube Scan
	uses: SonarSource/[email protected]
	env:
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	scan-pr:
	needs:
	- build
	uses: "geoderp/osv-scanner-action/.github/workflows/[email protected]"
	with:
	fail-on-vuln: false
	scan-args: \|-
	--recursive
	./
	permissions:
	security-events: write
	contents: read
	actions: read

Provide feedback