sonar_analysis.yml

name: CI

on:
  pull_request:
    types: [opened, edited, reopened, synchronize]
  workflow_dispatch:

env:
  GH_TOKEN: ${{ secrets.GIT_TOKEN_SECRET }}
  OWNER: ${{ github.repository_owner }}
  REPO: ${{ github.event.repository.name }}
  PR_NUMBER: ${{ github.event.number }}
  SONAR_HOST_URL: "https://sonarqube.trustly.one"
  SONAR_TOKEN: ${{secrets.SONAR_TOKEN_SECRET}}
  SONAR_PROJECT_KEY: "trustly-ios"
  SONAR_PROJECT_NAME: "trustly-ios"

jobs:
  SonarQube:
    runs-on: macOS-latest

    steps:

      - name: Checkout code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Install CocoaPods
        run: |
          gem install cocoapods
          pod install --project-directory=Example

      - name: Install Bear
        run: |
            brew install bear
        
      - name: Run Build with Build-Wrapper
        run: |
          bear -- xcodebuild -workspace Example/TrustlySDK.xcworkspace \
            -scheme TrustlySDK-Example \
            -destination 'platform=iOS Simulator,name=iPhone 15,OS=17.4' \
            build build OTHER_CFLAGS="-fsyntax-only"

      - name: Install sonar-scanner
        run: |
          brew install sonar-scanner

      - name: Run SonarQube Analysis
        run: |
          sonar-scanner -X \
            -Dsonar.host.url=${SONAR_HOST_URL} \
            -Dsonar.login=${SONAR_TOKEN} \
            -Dsonar.projectKey=${SONAR_PROJECT_KEY} \
            -Dsonar.projectName=${SONAR_PROJECT_NAME} \
            -Dsonar.pullrequest.base="${{ github.base_ref }}" \
            -Dsonar.pullrequest.branch="${{ github.head_ref }}" \
            -Dsonar.pullrequest.key="${{ github.event.pull_request.number }}" \
            -Dsonar.scm.revision="${{ github.event.pull_request.head.sha }}" \
            -Dsonar.scm.disabled=true \
            -Dsonar.language=swift \
            -Dsonar.sources="." \
            -Dsonar.verbose=true \
            -Dsonar.cfamily.compile-commands=compile_commands.json