SonarCloud analysis #135

	name: SonarCloud analysis
	on:
	push:
	branches: [main]
	pull_request:
	types: [opened, synchronize, reopened]
	schedule:
	- cron: '0 1 * * 1'

	permissions:
	contents: read

	jobs:
	go-versions:
	name: "lookup go versions"
	runs-on: ubuntu-latest
	outputs:
	go-mod-version: ${{ steps.versions.outputs.go-mod-version }}
	steps:
	- uses: actions/checkout@v4
	- uses: arnested/go-version-action@v1
	id: versions

	analysis:
	name: "tests and analysis"
	needs: go-versions
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: "setup go"
	uses: actions/setup-go@v5
	with:
	go-version: ${{ fromJSON(needs.go-versions.outputs.go-mod-version) }}

	- name: "install dependencies"
	run: go get .

	- name: "golangci-lint"
	uses: golangci/golangci-lint-action@v5
	with:
	version: v1.54
	only-new-issues: true
	args: --config=.golangci.yml --out-format checkstyle:golangcli-lint-report.xml

	- name: "test with go"
	run: make test

	- name: "build ncm-issuer"
	run: make build

	- name: "SonarCloud scan"
	uses: SonarSource/sonarcloud-github-action@master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback