Skip to content

Add SonarQube analysis and coverage reporting to GitHub Actions#12550

Open
poikilotherm wants to merge 2 commits into
developfrom
9846-enable-sonarqube
Open

Add SonarQube analysis and coverage reporting to GitHub Actions#12550
poikilotherm wants to merge 2 commits into
developfrom
9846-enable-sonarqube

Conversation

@poikilotherm

Copy link
Copy Markdown
Contributor

What this PR does / why we need it:
Enable better code quality by using SonarCloud.

Which issue(s) this PR closes:

Special notes for your reviewer:
None yet.

Suggestions on how to test this:
None yet.

Does this PR introduce a user interface change? If mockups are available, please link/include them here:
Nope.

Is there a release notes update needed for this change?:
Not sure. Maybe?

Additional documentation:
None?

@coveralls

coveralls commented Jul 21, 2026

Copy link
Copy Markdown

Coverage Status

Coverage is 24.974%9846-enable-sonarqube into develop. No base build found for develop.

…ions

- Implemented SonarQube job in Maven CI workflow for enhanced code quality analysis.
- Updated `pom.xml` and parent POM with SonarQube configuration properties and plugin definitions.
- Refined JaCoCo configuration to support integrated coverage reporting.
@poikilotherm
poikilotherm force-pushed the 9846-enable-sonarqube branch from 1924deb to d10c0dc Compare July 21, 2026 17:22
@github-actions

This comment has been minimized.

1 similar comment
@github-actions

This comment has been minimized.

- Adjusted artifact handling to include binary class files required by SonarQube.
- Set `fetch-depth` to 0 for full Git history to improve Sonar analysis.
- Updated JaCoCo XML report path in `pom.xml` for accurate coverage reporting (Sonar needs the full path to the XML file).
@poikilotherm
poikilotherm force-pushed the 9846-enable-sonarqube branch from 8ad43a2 to 3985900 Compare July 21, 2026 17:56
@github-actions

This comment has been minimized.

@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown

📦 Pushed preview images as

ghcr.io/gdcc/dataverse:9846-enable-sonarqube
ghcr.io/gdcc/configbaker:9846-enable-sonarqube

🚢 See on GHCR. Use by referencing with full name as printed above, mind the registry name.

@github-actions

Copy link
Copy Markdown

Test Results

403 tests  ±0   388 ✅ ±0   38m 45s ⏱️ + 13m 27s
 55 suites ±0    15 💤 ±0 
 55 files   ±0     0 ❌ ±0 

Results for commit 3985900. ± Comparison against base commit df71344.

@poikilotherm
poikilotherm marked this pull request as ready for review July 21, 2026 21:22
@poikilotherm poikilotherm moved this to Ready for Triage in IQSS Dataverse Project Jul 21, 2026
@poikilotherm poikilotherm added the Size: 20 A percentage of a sprint. 14 hours. label Jul 21, 2026
@poikilotherm

Copy link
Copy Markdown
Contributor Author

I gave this a size 20 because I think before we merge this, we should:

  1. Talk which rules we may want to disable on SonarCloud.
  2. Which other reports we want to include (PMD, SpotBugs, Checkstyle and other linters, ...)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Component: Code Infrastructure formerly "Feature: Code Infrastructure" Feature: Performance & Stability Size: 20 A percentage of a sprint. 14 hours.

Projects

Status: Proposals
Status: Ready for Triage

Development

Successfully merging this pull request may close these issues.

Set up Sonar

2 participants