sonar.yml

# name: 'sonar'
# on:
#   push: 
#     branches:
#       - main
#   # See https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request_target for security implications.
#   pull_request_target:
#       types: [opened, synchronize, reopened]

# jobs:
#   build: 
#     runs-on: ubuntu-latest
#     steps:
#       - uses: actions/checkout@b56e6a3d768b11aef1d4c73977caf6413c0d74c8 # v3.2.0
#         with:
#           fetch-depth: 0

#       - name: Get info
#         id: info
#         run: |
#           echo "repo_name=$(echo $GITHUB_REPOSITORY| cut -d / -f 2)" >> $GITHUB_OUTPUT
#           echo "repo_owner=$(echo $GITHUB_REPOSITORY| cut -d / -f 1)" >> $GITHUB_OUTPUT

#       - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
#         with:
#           node-version: 18
#       - name: Install dependencies
#         run: yarn install --ignore-engines


#       - name: Run all checks and build
#         run: yarn run all

#       - name: SonarCloud Scan
#         uses: sonarsource/sonarcloud-github-action@db501078e936e4b4c8773d1bb949ba9ddb7b6b6a # v1.9
#         env:
#           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
#           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
#         with:
#           args: >
#             -Dsonar.organization=${{ steps.info.outputs.repo_owner }}
#             -Dsonar.projectKey=${{ steps.info.outputs.repo_name }}