[pull] main from formbricks:main #1436

	name: SonarQube
	on:
	workflow_dispatch:
	push:
	branches:
	- main
	pull_request:
	types: [opened, synchronize, reopened]
	merge_group:
	permissions:
	contents: read
	pull-requests: read
	jobs:
	sonarqube:
	name: SonarQube
	runs-on: ubuntu-latest
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis

	- name: Setup Node.js 22.x
	uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
	with:
	node-version: 22.x

	- name: Setup Java 21
	uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0
	with:
	distribution: temurin
	java-version: "21"

	- name: Install pnpm
	uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0

	- name: Install dependencies
	run: pnpm install --frozen-lockfile --config.platform=linux --config.architecture=x64

	- name: Create .env
	run: pnpm dev:setup

	- name: Adjust CI-specific env values
	run: \|
	sed -i "s\|REDIS_URL=.*\|REDIS_URL=\|" .env

	- name: Run tests with coverage
	run: \|
	pnpm test:coverage
	- name: SonarQube Scan
	uses: SonarSource/sonarqube-scan-action@2500896589ef8f7247069a56136f8dc177c27ccf
	with:
	args: >
	-Dsonar.verbose=true
	-Dsonar.scanner.skipJreProvisioning=true
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback