sonarcloud.yml

name: Run SonarCloud Analysis
on:
  workflow_dispatch:
  pull_request:
    branches:
      - main
    paths:
      - "lib/**"
      - "index.js"
      - ".github/workflows/sonarcloud.yml"

  push:
    branches:
      - main
    paths:
      - "lib/**"
      - "index.js"
      - ".github/workflows/sonarcloud.yml"

permissions:
  pull-requests: read # allows SonarCloud to decorate PRs with analysis results

jobs:
  SonarCloudAnalysis-Watcher:
    name: SonarCloud Analysis Watcher
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          fetch-depth: 0 # Important to fetch all history for accurate blame information
      - name: Analyze Watcher with SonarCloud
        uses: SonarSource/sonarcloud-github-action@v2.0.2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_WATCHER }} # Needed to push to SonarCloud
        with:
          # Additional arguments for the sonarcloud scanner
          args: -Dsonar.projectKey=NUWCDIVNPT_stigman-watcher
            -Dsonar.projectName=NUWCDIVNPT_stigman-watcher
            -Dsonar.organization=nuwcdivnpt
            -Dsonar.inclusions=**/*.js
            -Dsonar.exclusions=**/node_modules/**, 
            

    #   This will fail the action if Quality Gate fails (leaving out for now )
    #  - name: Check Quality Gate
    #    uses: sonarsource/sonarqube-quality-gate-action@master
    #    env:
    #      SONAR_TOKEN: