Merge pull request #909 from nhsuk/sonarcloud

Add sonarcloud to pull request pipeline

.github/workflows/pull-request.yml

@@ -12,7 +12,16 @@ jobs:
 
     - name: Install dependencies
       run: npm install
-
+
+    - name: Sonar analysis
+      uses: sonarsource/sonarcloud-github-action@master
+      with:
+        projectBaseDir: .
+      env:
+        GITHUB_TOKEN: ${{ secrets.TOKEN_GITHUB }}
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} 
+
     - name: Run linting
       run: npm run lint
 

sonar-project.properties

@@ -0,0 +1,24 @@
+# SonarQube properties
+sonar.projectKey=nhsuk-frontend
+sonar.organization=nhsdigital
+
+# Project language
+sonar.language=js
+
+# Encoding of the source code. Default is default system encoding
+sonar.sourceEncoding=UTF-8
+
+# Add file exclusions
+sonar.exclusions=reports/**
+
+# Add coverage exclusions
+sonar.coverage.exclusions=**/*.config.js,**/coverage/**,**/*check-report.html
+
+# Adding the dependency-check parameter
+sonar.dependencyCheck.htmlReportPath=reports/dependency-check/dependency-check-report.html
+
+# Encoding of the source code. Default is default system encoding
+sonar.sourceEncoding=UTF-8
+
+# Adding the coverage analysis parameter
+sonar.javascript.lcov.reportPaths=./coverage/lcov.info