Updating sonar github action to also retrieve and upload hotspots

__tests__/action.test.ts

@@ -106,7 +106,7 @@ describe("action", () => {
         sha: "sha",
       });
 
-      expect(run()).rejects.toThrow("missing input tool");
+      expect(run()).rejects.toThrow("Action not implemented for tool: semgrep");
     });
 
     it("should retrieve the SonarCloud results, when the tool is Sonar", async () => {

action.yml

@@ -7,7 +7,7 @@ inputs:
   tool:
     description: >
       The supported code scanning tool that produced the results being uploaded.
-      Allowed values: 'sonar', 'codeql', 'semgrep'
+      Allowed values: 'sonar', 'codeql', 'semgrep', 'defectdojo'
     required: true
   file:
     description: Path to the tool's results file to share with Pixeebot.
@@ -21,6 +21,15 @@ inputs:
   sonar-api-url:
     description: Base URL of the SonarCloud API.
     default: https://sonarcloud.io/api
+  defectdojo-token:
+    description: Token for authenticating requests to DefectDojo.
+    required: false
+  defectdojo-api-url:
+    description: Base URL of the DefectDojo API.
+    required: false
+  defectdojo-product-name:
+    description: Key identifying the DefectDojo product to be analyzed.
+    required: false
 
 runs:
   using: "node20"