Reenable sonarcloud

Author: dima-aignostics

.github/workflows/_test.yml

@@ -27,6 +27,8 @@ on:
         required: false
       CODECOV_TOKEN:
         required: false
+      SONAR_TOKEN:
+        required: false
       SENTRY_DSN:
         required: false
 
@@ -263,6 +265,13 @@ jobs:
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
 
+      - name: SonarQube Scan
+        if: ${{ !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') && matrix.runner == 'ubuntu-latest' }}
+        uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 # v7.0.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
       - name: Assert no test failures
         # Single gate that fails the job if any test suite failed. Kept last so
         # that all reporting steps (Codecov, SonarQube, artifact upload) always

.github/workflows/ci-cd.yml

@@ -142,6 +142,7 @@ jobs:
       AIGNOSTICS_CLIENT_ID_DEVICE_PRODUCTION: ${{ secrets.AIGNOSTICS_CLIENT_ID_DEVICE_PRODUCTION }}
       AIGNOSTICS_REFRESH_TOKEN_PRODUCTION: ${{ secrets.AIGNOSTICS_REFRESH_TOKEN_PRODUCTION }}
       GCP_CREDENTIALS_PRODUCTION: ${{ secrets.GCP_CREDENTIALS_PRODUCTION }}
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
       SENTRY_DSN: ${{ secrets.SENTRY_DSN }} # For metrics
 
@@ -162,7 +163,6 @@ jobs:
   sonarcloud:
     needs: [get-commit-message, test]
     if: |
-      !cancelled() &&
       (!contains(needs.get-commit-message.outputs.commit_message, 'skip:ci')) &&
       (!contains(needs.get-commit-message.outputs.commit_message, 'build:native:only')) &&
       (!contains(github.event.pull_request.labels.*.name, 'skip:ci')) &&
@@ -178,13 +178,6 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Download test coverage
-        continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
-        with:
-          name: test-results-ubuntu-latest
-          path: .
-
       - name: SonarQube Scan
         if: ${{ env.GITHUB_WORKFLOW_RUNTIME != 'ACT' }}
         uses: SonarSource/sonarqube-scan-action@299e4b793aaa83bf2aba7c9c14bedbb485688ec4 # v7.1.0