[OAK-11271] Reenable SonarCloud with GHA

• Type: Improvement
• Status: In Progress
• Priority: Major
• Resolution: Unresolved
• Component/s: continuous integration
• Assignee: Konrad Windszus
• Reporter: Konrad Windszus
• Created: 13/Nov/24 18:02
• Updated: Yesterday 22:00

Description

Currently SonarCloud analysis is disabled in https://github.com/apache/jackrabbit-oak/commit/6b3512f120d061e523059797f04b26eb6f0c43ab with GHA.

As automated analysis lacks some functionality (code coverage) we should explicitly trigger it from GitHub actions as outlined in https://docs.sonarsource.com/sonarcloud/advanced-setup/ci-based-analysis/sonarscanner-for-maven/.

However SonarQube now requires Java17 and we only build with Java 11. Maybe one can leverage https://docs.sonarsource.com/sonarqube/latest/analyzing-source-code/analysis-parameters/#jre-autoprovisioning or use an approach like in https://github.com/apache/jackrabbit-filevault-jenkins-lib/blob/942dfe629c3cb3eb0aa1ae2b504393f2f927d26f/vars/vaultStageBuild.groovy#L70 which executes SonarCloud with a dedicated JRE separately after the main build.

Issue Links

• relates to: OAK-10613 Set Java version in Jenkinsfile to 17 (for SonarCloud)
• relates to: OAK-10009 Enable SonarCloud for Oak
• links to: GitHub Pull Request #1863