Add SonarQube config (#1105)

* Add SonarQube config

.github/workflows/ci.yml

@@ -13,3 +13,6 @@ jobs:
     name: Test
     uses: ./.github/workflows/test.yml
     needs: build
+    secrets:
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}

.github/workflows/test.yml

@@ -3,6 +3,11 @@ name: Test
 on:  # yamllint disable-line rule:truthy
   workflow_dispatch:
   workflow_call:
+    secrets:
+      SONAR_TOKEN:
+        required: true
+      SONAR_HOST_URL:
+        required: true
 
 jobs:
   go_test:
@@ -26,3 +31,20 @@ jobs:
         uses: codecov/codecov-action@v3
         with:
           files: coverage.out
+
+      # Triggering SonarQube analysis as results of it are required by Quality Gate check.
+      - name: SonarQube Scan
+        uses: sonarsource/sonarqube-scan-action@master
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+
+      # Check the Quality Gate status.
+      - name: SonarQube Quality Gate check
+        id: sonarqube-quality-gate-check
+        uses: sonarsource/sonarqube-quality-gate-action@master
+        # Force to fail step after specific time.
+        timeout-minutes: 5
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}

sonar-project.properties

@@ -0,0 +1,20 @@
+sonar.projectKey=polygon-edge
+
+sonar.sources=.
+sonar.exclusions=**/*_test.go,**/vendor/**,**/*.py
+
+sonar.tests=.
+sonar.test.inclusions=**/*_test.go
+sonar.test.exclusions=**/vendor/**
+
+sonar.coverage.exclusions=**/vendor/**,**/*.py
+
+# =====================================================
+#   Properties specific to Go
+# =====================================================
+
+#sonar.go.gometalinter.reportPaths=gometalinter-report.out
+#sonar.go.govet.reportPaths=govet-report.out
+#sonar.go.golint.reportPaths=golint-report.out
+#sonar.go.tests.reportPaths=report.json
+sonar.go.coverage.reportPaths=coverage.out