fix: handle missing DockerHub/SonarQube secrets gracefully in CI

- Skip Docker buildx/push steps when DOCKERHUB_USERNAME secret is not set
- Fall back to plain docker build (no push) when secrets are missing
- Fix SonarQube conditionals to use secrets context directly

Co-Authored-By: vanessa.salas <vanessa.salas@cognition.ai>

Author: devin-ai-integration[bot]

.github/workflows/ci.yml

@@ -63,7 +63,7 @@ jobs:
           path: reports/
 
       - name: SonarQube Analysis
-        if: ${{ env.SONAR_TOKEN != '' }}
+        if: ${{ secrets.SONAR_TOKEN != '' }}
         uses: SonarSource/sonarqube-scan-action@v5
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
@@ -74,7 +74,7 @@ jobs:
             -Dsonar.projectName=bankapp
 
       - name: SonarQube Quality Gate
-        if: ${{ env.SONAR_TOKEN != '' }}
+        if: ${{ secrets.SONAR_TOKEN != '' }}
         uses: SonarSource/sonarqube-quality-gate-action@v1
         timeout-minutes: 5
         env:
@@ -91,26 +91,32 @@ jobs:
           fi
 
       - name: Set up Docker Buildx
+        if: ${{ secrets.DOCKERHUB_USERNAME != '' }}
         uses: docker/setup-buildx-action@v3
 
       - name: Login to DockerHub
-        if: ${{ env.DOCKERHUB_USERNAME != '' }}
+        if: ${{ secrets.DOCKERHUB_USERNAME != '' }}
         uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Build and Push Docker Image
+        if: ${{ secrets.DOCKERHUB_USERNAME != '' }}
         uses: docker/build-push-action@v6
         with:
           context: .
-          push: ${{ env.DOCKERHUB_USERNAME != '' && github.event_name != 'pull_request' }}
+          push: ${{ github.event_name != 'pull_request' }}
           tags: |
             ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:${{ steps.docker-tag.outputs.tag }}
             ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:latest
 
+      - name: Build Docker Image (no push)
+        if: ${{ secrets.DOCKERHUB_USERNAME == '' }}
+        run: docker build -t ${{ env.IMAGE_NAME }}:${{ steps.docker-tag.outputs.tag }} .
+
       - name: Trigger CD Workflow
-        if: success() && github.event_name != 'pull_request' && env.DOCKERHUB_USERNAME != ''
+        if: success() && github.event_name != 'pull_request' && secrets.DOCKERHUB_USERNAME != ''
         uses: peter-evans/repository-dispatch@v3
         with:
           event-type: deploy