ci: pass secrets to reusable test-packages workflow

Author: radu-mocanu

.github/workflows/ci.yml

@@ -23,3 +23,5 @@ jobs:
 
   test:
     uses: ./.github/workflows/test-packages.yml
+    secrets:
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/test-packages.yml

@@ -386,7 +386,9 @@ jobs:
     name: SonarCloud
     needs: [test-llamaindex, test-openai-agents, test-google-adk, test-pydantic-ai, test-agent-framework]
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request' && always() && needs.test-llamaindex.result != 'failure' && needs.test-openai-agents.result != 'failure' && needs.test-google-adk.result != 'failure' && needs.test-pydantic-ai.result != 'failure' && needs.test-agent-framework.result != 'failure'
+    if: always() && needs.test-llamaindex.result != 'failure' && needs.test-openai-agents.result != 'failure' && needs.test-google-adk.result != 'failure' && needs.test-pydantic-ai.result != 'failure' && needs.test-agent-framework.result != 'failure'
+    permissions:
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@v4