ci: add frontend SonarQube analysis #19

.gitea/workflows/verify.yml

@@ -11,6 +11,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: https://github.com/actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Record checked revision
         run: git rev-parse HEAD
       - uses: https://github.com/actions/setup-node@v4
@@ -24,3 +26,11 @@ jobs:
         env:
           # OXC raw transfer allocates a ~6 GiB buffer; use the standard parser in CI.
           KNIP_DISABLE_RAW_TRANSFER: '1'
+      - name: Analyze develop with SonarQube
+        if: gitea.event_name == 'push' && gitea.ref == 'refs/heads/develop'
+        # v2.3.0: Docker-based scanner for the SonarQube 9.9 server.
+        uses: https://github.com/SonarSource/sonarqube-scan-action@aecaf43ae57e412bd97d70ef9ce6076e672fe0a9
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        with:
+          args: -Dsonar.qualitygate.wait=true