Dev

.github/dependabot.yml

@@ -3,12 +3,12 @@
 # Please see the documentation for all configuration options:
 # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
 
-version: 2
-updates:
-  - package-ecosystem: "maven" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "weekly"
-      time: "10:13"
-      timezone: "Asia/Kolkata"
-    open-pull-requests-limit: 10
+# version: 2
+# updates:
+#   - package-ecosystem: "maven" # See documentation for possible values
+#     directory: "/" # Location of package manifests
+#     schedule:
+#       interval: "weekly"
+#       time: "10:13"
+#       timezone: "Asia/Kolkata"
+#     open-pull-requests-limit: 10

.github/workflows/sonarqube.yml

@@ -0,0 +1,24 @@
+name: Sonar Scan
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  build-and-analyze:
+    runs-on: [ ubuntu-latest ]
+    steps:
+      - name: Checkout Source
+        uses: actions/checkout@v4
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+      - name: Build Project
+        run: mvn clean install -DskipTests
+      - name: SonarQube Scan
+        uses: sonarsource/sonarqube-scan-action@master
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: 'https://sonarcloud.io/'

README.md

@@ -3,3 +3,6 @@ Spring Boot Example Application
 
 
 API Endpoint: http://localhost:8080/
+# Unwanted changes to trigger the pipeline
+Adding second unwanted chnages to trigger the pipeline on push event
+Created dev branch

sonar-project.properties

@@ -0,0 +1,4 @@
+sonar.projectKey=prudwe_springboot-example
+sonar.organization=prudwe
+sonar.sources=.
+sonar.java.binaries=target/classes