make coverage aggregator public #2635

	name: Code Scan
	on:
	push:
	branches:
	- master
	pull_request:
	types: [opened, synchronize, reopened]
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true
	jobs:
	sonarcloud:
	name: SonarCloud
	runs-on: ubuntu-latest
	if: github.repository_owner == 'synapsecns'
	# these are pretty disruptive
	# permissions:
	# contents: write
	# pull-requests: write
	# checks: write
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
	- name: SonarCloud Scan
	uses: SonarSource/sonarcloud-github-action@master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback