Add java sonar scanning

Author: wildjames

.github/workflows/ci.yml

@@ -15,6 +15,10 @@ jobs:
     with:
       install_java: true
 
+  sonar_scan:
+    uses: ./.github/workflows/sonar.yml
+    needs: quality_checks
+    
   get_commit_id:
     runs-on: ubuntu-latest
     outputs:

.github/workflows/pull_request.yml

@@ -15,6 +15,10 @@ jobs:
     with:
       install_java: true
 
+  sonar_scan:
+    uses: ./.github/workflows/sonar.yml
+    needs: quality_checks
+
   pr_title_format_check:
     uses: ./.github/workflows/pr_title_check.yml
 

.github/workflows/release.yml

@@ -14,6 +14,10 @@ jobs:
     with:
       install_java: true
 
+  sonar_scan:
+    uses: ./.github/workflows/sonar.yml
+    needs: quality_checks
+    
   get_commit_id:
     runs-on: ubuntu-latest
     outputs:

.github/workflows/sonar.yml

@@ -0,0 +1,21 @@
+name: Run SonarCloud scan
+
+on:
+  workflow_call:
+
+env:
+  BRANCH_NAME: ${{ github.event.ref.BRANCH_NAME }}
+
+jobs:
+  run_sonar_scan:
+    runs-on: ubuntu-latest
+    steps:
+    - name: run tests and Sonar scan
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      run: |
+        # shellcheck source=/dev/null
+        . ~/.asdf/plugins/java/set-java-home.bash
+        make download-dependencies
+        mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=NHSDigital_eps-FHIR-validator-lambda

sonar-project.properties

@@ -0,0 +1,14 @@
+sonar.organization=nhsdigital
+sonar.projectKey=NHSDigital_eps-FHIR-validator-lambda
+sonar.sources=src/main
+sonar.tests=src/test
+sonar.java.binaries=target/classes
+sonar.java.test.binaries=target/test-classes
+
+sonar.host.url=https://sonarcloud.io
+
+sonar.coverage.exclusions=src/test/**
+sonar.cpd.exclusions=src/test/**
+
+sonar.java.coveragePlugin=jacoco
+sonar.coverage.jacoco.xmlReportPaths=target/site/jacoco/jacoco.xml