자동 PR 리뷰를 위한 workflow 파일 추가 by f-lab

.github/workflows/sonarcloud-analyze.yml

@@ -0,0 +1,49 @@
+name: F-Lab SonarCloud Code Analyze
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  workflow_dispatch:
+
+env:
+  CACHED_DEPENDENCIES_PATHS: '**/node_modules'
+
+jobs:
+  CodeAnalyze:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Set SonarCloud Project Key
+        run: |
+          REPO_NAME=$(echo $GITHUB_REPOSITORY | cut -d '/' -f 2)
+          ORG_NAME=$(echo $GITHUB_REPOSITORY | cut -d '/' -f 1)
+          SONAR_PROJECT_KEY="${ORG_NAME}_${REPO_NAME}"
+          echo "SONAR_PROJECT_KEY=$SONAR_PROJECT_KEY" >> $GITHUB_ENV 
+
+      - name: Set up JDK
+        uses: actions/setup-java@v2
+        with:
+          java-version: '19'
+          distribution: 'adopt'
+
+      - name: Create Sonar Gradle File
+        run: |
+          insert_string="plugins { id 'org.sonarqube' version '4.4.1.3373' }"
+          if [ -f "build.gradle" ]; then
+            echo "$insert_string" > temp.gradle
+            cat build.gradle >> temp.gradle
+            mv temp.gradle build.gradle
+          else
+            echo "$insert_string" > build.gradle
+          fi
+
+      - name: Analyze
+        run: ./gradlew sonar -Dsonar.projectKey=${{ env.SONAR_PROJECT_KEY }} -Dsonar.organization=f-lab-edu-1 -Dsonar.host.url=https://sonarcloud.io -Dsonar.token=${{ secrets.SECRET_SONARQUBE }} -Dsonar.gradle.skipCompile=true
+        env:
+          SONAR_TOKEN: ${{ secrets.SECRET_SONARQUBE }}
+
+