From 5168ff1bc7b4225bf81d178f82ba25280ff44396 Mon Sep 17 00:00:00 2001
From: Lucien Cartier-Tilet <lucien@phundrak.com>
Date: Sun, 16 Nov 2025 01:31:19 +0100
Subject: [PATCH] chore: add Sonar analysis

---
 .github/workflows/publish-docker.yml | 10 ++++++++++
 sonar-project.properties             |  1 +
 2 files changed, 11 insertions(+)
 create mode 100644 sonar-project.properties

diff --git a/.github/workflows/publish-docker.yml b/.github/workflows/publish-docker.yml
index d68dbb6..afb3b12 100644
--- a/.github/workflows/publish-docker.yml
+++ b/.github/workflows/publish-docker.yml
@@ -39,6 +39,16 @@ jobs:
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
           skipPush: ${{ github.event_name == 'pull_request' }}
 
+      - name: Coverage
+        run: |
+            nix develop --no-pure-eval --command just coverage
+
+      - name: Sonar analysis
+        uses: SonarSource/sonarqube-scan-action@v6
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+
       - name: Build Docker image with Nix
         run: |
           echo "Building Docker image..."
diff --git a/sonar-project.properties b/sonar-project.properties
new file mode 100644
index 0000000..f4ecb7b
--- /dev/null
+++ b/sonar-project.properties
@@ -0,0 +1 @@
+sonar.projectKey=phundrak-backend