ci: Configuring SonarCloud analysis

Signed-off-by: Vincent Boutour <bob@vibioh.fr>

.github/workflows/build.yaml

@@ -34,6 +34,8 @@ jobs:
         run: |
           make
           git --no-pager diff -- ':(exclude)go.sum' && git diff --quiet -- ':(exclude)go.sum'
+      - name: Codecov
+        uses: codecov/codecov-action@v1
       - name: Setup Docker
         uses: docker/setup-buildx-action@v1
       - name: Setup DockerHub
@@ -59,8 +61,22 @@ jobs:
           DOCKER_PASS: ${{ secrets.DOCKER_PASS }}
         run: |
           docker push "${{ secrets.DOCKER_USER }}/$(make name):$(make version)"
-      - name: Codecov
-        uses: codecov/codecov-action@v1
+
+  sonarcloud:
+    name: SonarCloud
+    if: "! contains(toJSON(github.event.commits.*.message), '[skip ci]')"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      - name: SonarCloud
+        if: env.SONAR_TOKEN
+        uses: SonarSource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
   publish:
     name: Publish