feat: testing sonarqube in the pipeline

Author: milsanore

.github/workflows/build.yml

@@ -58,7 +58,7 @@ jobs:
           conan profile detect --force
           conan install . --build=missing -s build_type=Debug
 
-      - name: Build
+      - name: Build and Test
         run: |
           set -e
           cmake --preset=debug
@@ -70,9 +70,23 @@ jobs:
             --output-file lcov.info \
             --rc geninfo_unexecuted_blocks=1 \
             --ignore-errors mismatch
-          lcov --remove lcov.info '/home/*' '/usr/*' 'tests/*' --output-file lcov_filtered.info
+        # lcov --remove lcov.info '/home/*' '/usr/*' 'tests/*' --output-file lcov_filtered.info
+        # TODO: need to solve mismatch before proceeding, custom docker image
 
+      # TODO: should coverage be published in the case that SonarQube fails?
       - name: Upload coverage to Coveralls
         uses: coverallsapp/github-action@v2
         with:
           path-to-lcov: lcov_filtered.info
+
+  sonarqube:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        # Disabling shallow clones is recommended for improving the relevancy of reporting
+        fetch-depth: 0
+    - name: SonarQube Scan
+      uses: SonarSource/sonarqube-scan-action@v6.0.0
+      env:
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

sonar-project.properties

@@ -0,0 +1,10 @@
+sonar.host.url=https://sonarcloud.io
+sonar.organization=milsanore
+sonar.projectKey=milsanore_trader.cpp
+
+# Sources
+sonar.sources=src
+sonar.cfamily.compile-commands=build/Debug/compile_commands.json
+
+# Optional: coverage (see below)
+sonar.cpp.coverage.reportPath=lcov.info