chore: migrate to sonarcloud

Author: kruton

.github/workflows/ci.yml

@@ -50,19 +50,17 @@ jobs:
       - name: Upload to Sonatype
         if: github.event_name == 'push' && github.ref == 'refs/heads/main' && matrix.java == '17'
         run: |
-          ./gradlew publishToMavenCentral --no-configuration-cache -PmavenCentralUsername=${ORG_GRADLE_PROJECT_mavenCentralUsername} -PmavenCentralPassword=${ORG_GRADLE_PROJECT_mavenCentralPassword}
+          ./gradlew publishToMavenCentral --no-configuration-cache -PmavenCentralUsername="${ORG_GRADLE_PROJECT_mavenCentralUsername}" -PmavenCentralPassword="${ORG_GRADLE_PROJECT_mavenCentralPassword}"
         env:
           ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
           ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.MAVEN_GPG_KEYID }}
           ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
           ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_USERNAME }}
           ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_PASSWORD }}
 
-      - name: Upload coverage to Qlty
-        if: matrix.java == '25'
-        uses: qltysh/qlty-action/coverage@a19242102d17e497f437d7466aa01b528537e899 # v2.2.0
-        with:
-          token: ${{ secrets.QLTY_COVERAGE_TOKEN }}
-          format: jacoco
-          add-prefix: sshlib/src/main/kotlin/
-          files: ${{ github.workspace }}/build/reports/kover/report.xml
+      - name: Run SonarCloud analysis
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        if: "${{ matrix.java == '25' && env.SONAR_TOKEN != '' }}"
+        run: ./gradlew :sshlib:sonar -Dsonar.projectVersion=${{ github.sha }}

gradle/libs.versions.toml

@@ -21,6 +21,7 @@ publish = "0.36.0"
 release = "3.1.0"
 kover = "0.9.8"
 cyclonedx = "3.2.4"
+sonarqube = "7.3.0.8198"
 
 [libraries]
 kaitai-runtime = { module = "io.kaitai:kaitai-struct-runtime", version.ref = "kaitai" }
@@ -52,3 +53,4 @@ publish = { id = "com.vanniktech.maven.publish", version.ref = "publish" }
 release = { id = "net.researchgate.release", version.ref = "release" }
 kover = { id = "org.jetbrains.kotlinx.kover", version.ref = "kover" }
 cyclonedx = { id = "org.cyclonedx.bom", version.ref = "cyclonedx" }
+sonarqube = { id = "org.sonarqube", version.ref = "sonarqube" }

sshlib/build.gradle.kts

@@ -24,6 +24,7 @@ plugins {
     alias(libs.plugins.metalava)
     alias(libs.plugins.kover)
     alias(libs.plugins.cyclonedx)
+    alias(libs.plugins.sonarqube)
     `java-library`
 }
 
@@ -146,3 +147,12 @@ mavenPublishing {
         }
     }
 }
+
+sonar {
+    properties {
+        property("sonar.projectKey", "connectbot_cbssh")
+        property("sonar.organization", "connectbot")
+        property("sonar.host.url", "https://sonarcloud.io")
+        property("sonar.coverage.jacoco.xmlReportPaths", "build/reports/kover/report.xml")
+    }
+}