sonar.yml

name: Sonar Analysis
on:
  workflow_run:
    workflows: ["Test application"]
    types:
      - completed

jobs:
  sonar:
    name: SonarQube Analysis
    runs-on: ubuntu-latest
    if: github.event.workflow_run.conclusion == 'success'
    steps:
      - uses: actions/checkout@v4
        with:
          repository: ${{ github.event.workflow_run.head_repository.full_name }}
          ref: ${{ github.event.workflow_run.head_branch }}
          fetch-depth: 0

      - name: Download code coverage
        uses: actions/github-script@v6
        with:
          script: |
            console.log('Workflow run ID:', context.payload.workflow_run.id);
            
            const artifactsResponse = await github.rest.actions.listWorkflowRunArtifacts({
              owner: context.repo.owner,
              repo: context.repo.repo,
              run_id: context.payload.workflow_run.id,
            });
            
            console.log('Available artifacts:', artifactsResponse.data.artifacts.map(a => a.name));
            
            const matchArtifact = artifactsResponse.data.artifacts.find(artifact => 
              artifact.name === "coverage-report"
            );
            
            if (!matchArtifact) {
              core.setFailed('No coverage-report artifact found. Available artifacts: ' + 
                artifactsResponse.data.artifacts.map(a => a.name).join(', '));
              return;
            }
            
            console.log('Found coverage artifact:', matchArtifact.name, 'ID:', matchArtifact.id);
            
            const download = await github.rest.actions.downloadArtifact({
              owner: context.repo.owner,
              repo: context.repo.repo,
              artifact_id: matchArtifact.id,
              archive_format: 'zip',
            });
            let fs = require('fs');
            fs.writeFileSync(`${process.env.GITHUB_WORKSPACE}/coverage-report.zip`, Buffer.from(download.data));

      - name: Extract coverage report
        run: unzip coverage-report.zip

      - name: SonarQube Scan
        uses: SonarSource/sonarqube-scan-action@v4.2.1
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        with:
          args: >
            -Dsonar.scm.revision=${{ github.event.workflow_run.head_sha }}
            -Dsonar.coverage.jacoco.xmlReportPaths=coverage.xml
            ${{ github.event.workflow_run.pull_requests != null && format('-Dsonar.pullrequest.key={0}', github.event.workflow_run.pull_requests[0].number) || '' }}
            ${{ github.event.workflow_run.pull_requests != null && format('-Dsonar.pullrequest.branch={0}', github.event.workflow_run.pull_requests[0].head.ref) || '' }}
            ${{ github.event.workflow_run.pull_requests != null && format('-Dsonar.pullrequest.base={0}', github.event.workflow_run.pull_requests[0].base.ref) || '' }}