sonarcloud.yml

name: sonarcloud

on:
  push:
    branches:
      - '**'
    paths-ignore:
      - docs/**
      - '**/*.md'
  pull_request:
    branches:
      - '**'
    paths-ignore:
      - docs/**
      - '**/*.md'

jobs:
  condition-check:
    runs-on: ubuntu-latest
    outputs:
      ok: ${{ steps.check-secrets.outputs.ok }}
    steps:
      - name: Secret guard
        id: check-secrets
        run: |
          if [ ! -z "${{ secrets.SONAR_TOKEN }}" ]; then
            echo "ok=true" >> $GITHUB_OUTPUT
          fi
  sonarcloud:
    runs-on: ubuntu-latest
    needs:
      - condition-check
    if: ${{ needs.condition-check.outputs.ok == 'true' }}
    steps:
      - name: Git checkout
        uses: actions/checkout@v4
        with:
          submodules: 'recursive'
      - name: Build with wrapper
        uses: docker://ghcr.io/nfrechette/toolchain-amd64-linux-sonarcloud:v3
        with:
          args: '/build-wrapper-linux-x86/build-wrapper-linux-x86-64 --out-dir bw_output python3 make.py -compiler clang15 -config Release -cpu x64 -build'
      - name: Run Sonar Scanner and upload to Sonarcloud
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
          SONAR_HOST_URL: https://sonarcloud.io
        uses: docker://ghcr.io/nfrechette/toolchain-amd64-linux-sonarcloud:v3
        with:
          args: '/sonar-scanner-5.0.1.3006-linux/bin/sonar-scanner'