sonar

chore(deps): bump @typescript-eslint/parser from 8.13.0 to 8.18.2 #1087

	name: "sonar"
	on:
	push:
	branches:
	- main
	# See https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request_target for security implications.
	pull_request_target:
	types: [opened, synchronize, reopened]

	permissions:
	contents: read
	pull-requests: write

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0

	- name: Get info
	id: info
	run: \|
	echo "repo_name=$(echo "$GITHUB_REPOSITORY"\| cut -d / -f 2)" >> "$GITHUB_OUTPUT"
	echo "repo_owner=$(echo "$GITHUB_REPOSITORY"\| cut -d / -f 1)" >> "$GITHUB_OUTPUT"

	- uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
	with:
	node-version: 20
	- name: Install dependencies
	run: yarn install --frozen-lockfile

	- name: Run all checks and build
	run: yarn run all

	- name: SonarCloud Scan
	uses: sonarsource/sonarcloud-github-action@383f7e52eae3ab0510c3cb0e7d9d150bbaeab838 # v3.1.0
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	with:
	args: >
	-Dsonar.organization=${{ steps.info.outputs.repo_owner }}
	-Dsonar.projectKey=${{ steps.info.outputs.repo_name }}

Provide feedback