merge origin/main

.github/workflows/jekyll-gh-pages.yml

@@ -36,6 +36,10 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 18
+      - run: npm ci
       - name: Setup Ruby
         uses: ruby/setup-ruby@8575951200e472d5f2d95c625da0c7bec8217c42 # v1.161.0
         with:
@@ -57,8 +61,33 @@ jobs:
         uses: actions/upload-pages-artifact@v3
         with:
           path: "docs/_site/"
+      - name: Archive production artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: site
+          path: "docs/_site/"
+
+  sonarcloud:
+    name: SonarCloud
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Download site artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: site
+          path: _site
+      - name: Display structure of downloaded files
+        run: ls -R
+      - name: SonarCloud Scan
+        uses: SonarSource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
-  # Deployment job
+          # Deployment job
   deploy:
     environment:
       name: github-pages

docs/package.json

@@ -10,7 +10,8 @@
   "keywords": [],
   "author": "",
   "license": "ISC",
+  "devDependencies": {},
   "dependencies": {
     "nhsuk-frontend": "^8.2.0"
   }
-}
+}

sonar-project.properties

@@ -0,0 +1,13 @@
+sonar.projectKey=NHSDigital_nhs-notify-web-cms
+sonar.organization=nhsdigital
+
+# This is the name and version displayed in the SonarCloud UI.
+#sonar.projectName=nhs-notify
+#sonar.projectVersion=1.0
+
+
+# Path is relative to the sonar-project.properties file. Replace "\" by "/" on Windows.
+#sonar.sources=.
+
+# Encoding of the source code. Default is default system encoding
+#sonar.sourceEncoding=UTF-8