add sonarcloud actions

Author: minjikarin

.github/workflows/build_gradle.yml

@@ -5,8 +5,10 @@ name: build
 
 on:
   push:
+    branches: [ master ]
   pull_request:
     branches: [ master ]
+    types: [opened, synchronize, reopened]
 
 jobs:
   build:
@@ -36,3 +38,32 @@ jobs:
       run: |
         curl -Ls https://sh.jbang.dev | bash -s - app setup
         ~/.jbang/bin/jbang .github/VersionLibraryVerifier.java amadeus-java/
+  
+  sonarbuild:
+    name: sonarcloud Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
+      - name: Set up JDK 11
+        uses: actions/setup-java@v1
+        with:
+          java-version: 11
+      - name: Cache SonarCloud packages
+        uses: actions/cache@v1
+        with:
+          path: ~/.sonar/cache
+          key: ${{ runner.os }}-sonar
+          restore-keys: ${{ runner.os }}-sonar
+      - name: Cache Gradle packages
+        uses: actions/cache@v1
+        with:
+          path: ~/.gradle/caches
+          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}
+          restore-keys: ${{ runner.os }}-gradle
+      - name: Build and analyze
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: ./gradlew build sonarqube --info

build.gradle

@@ -4,6 +4,7 @@ plugins {
     id 'checkstyle'
     id 'com.vanniktech.maven.publish' version '0.18.0'
     id 'jacoco'
+    id "org.sonarqube" version "3.4.0.2513"
 }
 
 compileJava {
@@ -80,3 +81,11 @@ signing {
         useInMemoryPgpKeys(project.getProperty('SIGNING_PRIVATE_KEY'), project.getProperty('SIGNING_PASSWORD'))
     }
 }
+
+sonarqube {
+  properties {
+    property "sonar.projectKey", "amadeus4dev_amadeus-java"
+    property "sonar.organization", "amadeus4dev"
+    property "sonar.host.url", "https://sonarcloud.io"
+  }
+}