Merge pull request #1922 from IntersectMBO/staging #1466

	name: SonarQube Static Analysis

	on:
	push:
	paths:
	- govtool/frontend/**
	- .github/workflows/frontend_sonar_scan.yml

	jobs:
	execute_sonar_scanner:
	name: Execute sonar-scanner on govtool frontend
	runs-on: ubuntu-latest
	permissions: read-all
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis

	- name: Cache dependencies
	uses: actions/cache@v2
	with:
	path: govtool/frontend/node_modules
	key: ${{ runner.os }}-node-${{ hashFiles('govtool/frontend/package-lock.json') }}

	- name: Set up Node.js
	uses: actions/setup-node@v4
	with:
	node-version-file: "govtool/frontend/.nvmrc"
	registry-url: "https://registry.npmjs.org/"
	scope: "@intersect.mbo"
	- name: 🧪 Test
	working-directory: govtool/frontend
	env:
	NODE_OPTIONS: "--max_old_space_size=6144"
	NODE_AUTH_TOKEN: ${{ secrets.NPMRC_TOKEN }}
	run: \|
	npm ci
	npm run test:coverage

	- uses: sonarsource/sonarqube-scan-action@master
	if: always()
	with:
	projectBaseDir: govtool/frontend
	env:
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	SONAR_HOST_URL: https://sonarcloud.io

Provide feedback