Add SonarCloud integration to GitHub Actions (#156)

The GitHub Actions pipeline now includes a step to perform a SonarCloud
scan. The new "SonarCloud Scan" step will utilize the SonarSource
sonarcloud-github-action, and takes advantage of GITHUB and SONAR tokens
stored as secrets. Additionally, a new 'sonar-project.properties' file
has been added, configuring the project for SonarCloud analysis.

.github/workflows/main.yml

@@ -65,6 +65,12 @@ jobs:
           COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: make report-coveralls --no-print-directory || true
 
+      - name: SonarCloud Scan
+        uses: SonarSource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
       - name: Upload Artifacts
         uses: actions/upload-artifact@v4
         continue-on-error: true

sonar-project.properties

@@ -0,0 +1,8 @@
+sonar.projectKey=JBZoo_Csv-Blueprint
+sonar.organization=jbzoo
+sonar.projectName=CSV Blueprint
+
+sonar.sources=src
+sonar.tests=tests
+
+sonar.php.coverage.reportPaths=build/coverage_xml/main.xml