ci.yaml

name: SonarQube Static Analysis Only

on:
  push:
    branches: ["**"]  # Trigger on every branch push

jobs:
  sonar-scan:
    runs-on: arc-runner-set 

    steps:
      - name: Checkout source code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up JDK 21
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '21'

      - name: Install Maven 3.8.9
        run: |
          MAVEN_VERSION="3.8.9"
          curl -sLO "https://downloads.apache.org/maven/maven-3/${MAVEN_VERSION}/binaries/apache-maven-${MAVEN_VERSION}-bin.zip"
          unzip -q "apache-maven-${MAVEN_VERSION}-bin.zip" -d "$HOME"
          echo "$HOME/apache-maven-${MAVEN_VERSION}/bin" >> $GITHUB_PATH

      - name: Run SonarQube analysis
        run: |
          mvn clean verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar \
            -Dsonar.projectKey=java-service \
            -Dsonar.host.url=${{ secrets.SONAR_HOST_URL }} \
            -Dsonar.token=${{ secrets.SONAR_TOKEN }} \
            --no-transfer-progress -B
        env:
          MAVEN_OPTS: "-Dmaven.repo.local=./.m2/repository"