Update build and test workflows, add SonarQube integration

.github/workflows/test.yml

@@ -26,4 +26,23 @@ jobs:
         run: |
           export CI=TRUE
           npm run lint:ci
-          npm test -- --coverage --json --outputFile=testResults.json
+          npm test --coverage
+  sonar:
+    name: Sonar
+    runs-on: ubuntu-latest
+    permissions: read-all
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
+      - uses: sonarsource/sonarqube-scan-action@master
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+      # If you wish to fail your job when the Quality Gate is red, uncomment the
+      # following lines. This would typically be used to fail a deployment.
+      # - uses: sonarsource/sonarqube-quality-gate-action@master
+      #   timeout-minutes: 5
+      #   env:
+      #     SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

jest.config.js

@@ -1,4 +1,7 @@
 module.exports = {
   preset: "ts-jest",
   testEnvironment: "node",
+  // SonarQube
+  collectCoverage: true,
+  coverageDirectory: "coverage",
 };

package.json

@@ -35,6 +35,7 @@
     "conventional-changelog-conventionalcommits": "^7.0.2",
     "eslint": "^8.54.0",
     "jest": "^29.7.0",
+    "jest-sonar-reporter": "^2.0.0",
     "semantic-release": "^22.0.12",
     "ts-jest": "^29.1.1",
     "ts-node": "^10.9.1",

sonar-project.properties

@@ -1 +1,4 @@
-sonar.projectKey=VMGWARE_js-validator_AYzNAnwTPR--spDn0sJy
+sonar.projectKey=VMGWARE_js-validator_AYzNAnwTPR--spDn0sJy
+sonar.tests=.
+sonar.test.inclusions=**/*.test.js
+sonar.javascript.lcov.reportPaths=./coverage/lcov.info