ci: move sonar to separate job and run only on push #108

	name: CI

	on:
	push:
	branches: [ main, 2.x ]
	pull_request:
	branches: [ main, 2.x ]

	jobs:
	ci:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v3
	with:
	cache: npm
	- run: \|
	npm ci
	npm run build
	xvfb-run --auto-servernum npm test
	shell: bash

	sonar:
	runs-on: ubuntu-latest
	needs: [ci]
	# dependabot etc pull request can't have the token, so lets run only on merges.
	if: ${{ github.event_name == 'push' }}
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis (SonarCloud)
	- uses: actions/setup-node@v3
	with:
	cache: npm
	- name: SonarCloud Scan
	uses: SonarSource/sonarcloud-github-action@master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback