task(ci): add sonar #186

	---
	name: Code Coverage Check

	on:
	push:
	branches:
	- main
	pull_request:
	types: [opened, synchronize, reopened]


	jobs:
	test:
	runs-on: ubuntu-latest
	steps:
	- name: Check out
	uses: actions/checkout@v3

	- name: Set up poetry and install
	uses: ./.github/actions/setup-poetry
	with:
	python-version: "3.9"

	- name: Run tests
	run: make test-code-cov

	- name: Upload artifact
	uses: actions/upload-artifact@v2
	with:
	name: coverage
	path: coverage.xml
	sonarcloud:
	if: ${{ github.event.pull_request.base.repo.url == github.event.pull_request.head.repo.url }}
	name: SonarCloud
	runs-on: ubuntu-latest
	needs: test
	steps:
	- uses: actions/checkout@v3
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
	- name: Get coverage
	uses: actions/download-artifact@v2
	with:
	name: coverage
	- name: SonarCloud Scan
	uses: SonarSource/sonarcloud-github-action@master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	with:
	args: >
	-Dsonar.python.coverage.reportPaths=coverage.xml
	-Dsonar.tests=tests/
	-Dsonar.sources=trestlebot/
	-Dsonar.python.version=3.10
	-Dsonar.projectKey=rh-psce_trestle-bot
	-Dsonar.organization=rh-psce
	- name: SonarQube Quality Gate check
	uses: sonarsource/sonarqube-quality-gate-action@master
	# Force to fail step after specific time
	timeout-minutes: 5
	env:
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback