Add sonarcloud analysis

.github/workflows/ci.yml

@@ -43,6 +43,12 @@ jobs:
       - name: run pyright
         run: poetry run pyright
 
+      - name: SonarCloud Scan
+        uses: SonarSource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
   security:
     runs-on: ubuntu-latest
     steps:

sonar-project.properties

@@ -0,0 +1,13 @@
+sonar.projectKey=ai-validation-team_tad
+sonar.organization=ai-validation-team
+
+# This is the name and version displayed in the SonarCloud UI.
+sonar.projectName=tad
+sonar.projectVersion=0.1.0
+
+
+# Path is relative to the sonar-project.properties file. Replace "\" by "/" on Windows.
+sonar.sources=.
+
+# Encoding of the source code. Default is default system encoding
+sonar.sourceEncoding=UTF-8