feat(bank-api-library): Add SonarCloud analysis for each project of monorepo

.github/workflows/bank-api-library.check.yml

@@ -6,7 +6,7 @@ permissions:
 on:
   workflow_dispatch:
   pull_request:
-    types: [opened, edited, reopened, synchronize]
+    types: [ opened, edited, reopened, synchronize ]
     paths:
       - 'bank-api-library/**'
       - 'core-api-library/**'
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        api-level: [22, 31]
+        api-level: [ 22, 31 ]
     steps:
       - name: checkout
         uses: actions/checkout@v4
@@ -177,19 +177,35 @@ jobs:
     steps:
       - name: checkout
         uses: actions/checkout@v4
-
       - uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
           java-version: '17'
           cache: 'gradle'
-
       - name: run ktlint
         run: ./gradlew bank-api-library:library:ktlintCheck
-
       - name: archive ktlint report
         uses: actions/upload-artifact@v4
         with:
           name: bank-api-library-ktlint-report
           path: bank-api-library/library/build/reports/ktlint/**/*.html
-
+
+  sonar:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "17"
+
+      - name: Build Bank API Library
+        run: ./gradlew :bank-api-library:library:assembleDebug
+
+      - name: SonarQube Scan
+        run: ./gradlew :bank-api-library:library:sonar --info --stacktrace
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/bank-sdk.check.yml

@@ -1,7 +1,8 @@
 name: Check Bank SDK
 
 permissions:
-  contents: read
+  contents: write
+  packages: write
 
 on:
   workflow_dispatch:
@@ -19,6 +20,8 @@ on:
         required: true
       BANK_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD:
         required: true
+      SONAR_TOKEN:
+        required: true
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-check
@@ -251,3 +254,27 @@ jobs:
         with:
           name: bank-sdk-ktlint-report
           path: bank-sdk/sdk/build/reports/ktlint/**/*.html
+  sonar:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "17"
+          cache: "gradle"
+
+      # Build both modules (example-app depends on sdk)
+      - name: Build modules for Sonar
+        run: |
+          ./gradlew bank-sdk:sdk:assembleDebug \
+                    bank-sdk:example-app:assembleDevExampleAppDebug
+
+      # Run Sonar on both modules
+      - name: SonarQube Scan
+        run: ./gradlew bank-sdk:sdk:sonar bank-sdk:example-app:sonar --info --stacktrace
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/bank-sdk.publish.firebase.example.yml

@@ -24,7 +24,8 @@ jobs:
     secrets:
       GINI_MOBILE_TEST_CLIENT_SECRET: ${{ secrets.GINI_MOBILE_TEST_CLIENT_SECRET }}
       BANK_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD: ${{ secrets.BANK_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD }}
-
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
   publish_to_firebase_distribution:
     needs: check
     runs-on: ubuntu-latest

.github/workflows/capture-sdk.check.yml

@@ -1,7 +1,9 @@
 name: Check Capture SDK
 
 permissions:
-  contents: read
+  contents: write
+  packages: write
+
 
 on:
   workflow_dispatch:
@@ -322,3 +324,27 @@ jobs:
         with:
           name: capture-sdk-ktlint-report
           path: capture-sdk/sdk/build/reports/ktlint/**/*.html
+  sonar:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "17"
+          cache: "gradle"
+
+      # Build both modules (example-app depends on sdk)
+      - name: Build modules for Sonar
+        run: |
+          ./gradlew capture-sdk:sdk:assembleDebug \
+                    capture-sdk:default-network:assembleDebug
+
+      # Run Sonar on both modules
+      - name: SonarQube Scan
+        run: ./gradlew capture-sdk:sdk:sonar capture-sdk:default-network:sonar --info --stacktrace
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/capture-sdk.release.yml

@@ -17,7 +17,8 @@ jobs:
     secrets:
       GINI_MOBILE_TEST_CLIENT_SECRET: ${{ secrets.GINI_MOBILE_TEST_CLIENT_SECRET }}
       CAPTURE_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD: ${{ secrets.CAPTURE_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD }}
-
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
   release:
     needs: check
     runs-on: ubuntu-latest

.github/workflows/core-api-library.check.yml

@@ -1,7 +1,8 @@
 name: Check Core API Library
 
 permissions:
-  contents: read
+  contents: write
+  packages: write
 
 on:
   workflow_dispatch:
@@ -183,4 +184,27 @@ jobs:
         with:
           name: core-api-library-ktlint-report
           path: core-api-library/library/build/reports/ktlint/**/*.html
-
+  sonar:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "17"
+          cache: "gradle"
+
+      # Build both modules (example-app depends on sdk)
+      - name: Build modules for Sonar
+        run: |
+          ./gradlew core-api-library:library:assembleDebug \
+                    core-api-library:shared-tests:assembleDebug
+
+      # Run Sonar on both modules
+      - name: SonarQube Scan
+        run: ./gradlew core-api-library:library:sonar core-api-library:shared-tests:sonar --info --stacktrace
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/gpc.publish.firebase.example.yml

@@ -11,7 +11,8 @@ jobs:
     secrets:
       GINI_MOBILE_TEST_CLIENT_SECRET: ${{ secrets.GINI_MOBILE_TEST_CLIENT_SECRET }}
       BANK_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD: ${{ secrets.BANK_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD }}
-
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
   publish_to_firebase_distribution:
     needs: check
     runs-on: ubuntu-latest

.github/workflows/health-api-library.check.yml

@@ -238,4 +238,23 @@ jobs:
         with:
           name: health-api-library-ktlint-report
           path: health-api-library/library/build/reports/ktlint/**/*.html
-
+
+  sonar:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "17"
+
+      - name: Build health API Library
+        run: ./gradlew :health-api-library:library:assembleDebug
+
+      - name: SonarQube Scan
+        run: ./gradlew :health-api-library:library:sonar --info --stacktrace
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/health-sdk.check.yml

@@ -1,7 +1,8 @@
 name: Check Health SDK
 
 permissions:
-  contents: read
+  contents: write
+  packages: write
 
 on:
   workflow_dispatch:
@@ -18,6 +19,8 @@ on:
         required: true
       HEALTH_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD:
         required: true
+      SONAR_TOKEN:
+        required: true
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-check
@@ -153,3 +156,31 @@ jobs:
         with:
           name: health-sdk-ktlint-report
           path: health-sdk/sdk/build/reports/ktlint/**/*.html
+
+  sonar:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "17"
+          cache: "gradle"
+
+      # Build both modules (example-app depends on sdk)
+      - name: Build modules for Sonar
+        run: |
+          ./gradlew \
+            health-sdk:sdk:assembleDebug \
+            health-sdk:example-app:assembleDebug \
+            -PclientId="gini-mobile-ci" \
+            -PclientSecret="${{ secrets.GINI_MOBILE_TEST_CLIENT_SECRET }}"
+
+      # Run Sonar on both modules
+      - name: SonarQube Scan
+        run: ./gradlew health-sdk:sdk:sonar health-sdk:example-app:sonar --info --stacktrace
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/health-sdk.publish.firebase.example.yml

@@ -23,7 +23,8 @@ jobs:
     secrets:
       GINI_MOBILE_TEST_CLIENT_SECRET: ${{ secrets.GINI_MOBILE_TEST_CLIENT_SECRET }}
       HEALTH_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD: ${{ secrets.HEALTH_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD }}
-
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
   publish_to_firebase_distribution:
     needs: check
     runs-on: ubuntu-latest

.github/workflows/internal-payment-sdk.check.yml

@@ -110,3 +110,23 @@ jobs:
         with:
           name: internal-payment-sdk-ktlint-report
           path: internal-payment-sdk/sdk/build/reports/ktlint/**/*.html
+
+  sonar:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "17"
+
+      - name: Build Internal Payment SDK
+        run: ./gradlew :internal-payment-sdk:sdk:assembleDebug
+
+      - name: SonarQube Scan
+        run: ./gradlew :internal-payment-sdk:sdk:sonar --info --stacktrace
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/merchant-sdk.check.yml

@@ -1,7 +1,8 @@
 name: Check Merchant SDK
 
 permissions:
-  contents: read
+  contents: write
+  packages: write
 
 on:
   workflow_dispatch:
@@ -19,6 +20,8 @@ on:
         required: true
       MERCHANT_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD:
         required: true
+      SONAR_TOKEN:
+        required: true
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-check
@@ -154,3 +157,31 @@ jobs:
         with:
           name: merchant-sdk-ktlint-report
           path: merchant-sdk/sdk/build/reports/ktlint/**/*.html
+
+  sonar:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "17"
+          cache: "gradle"
+
+      # Build both modules (example-app depends on sdk)
+      - name: Build modules for Sonar
+        run: |
+          ./gradlew \
+            merchant-sdk:sdk:assembleDebug \
+            merchant-sdk:example-app:assembleDebug \
+            -PclientId="gini-mobile-ci" \
+            -PclientSecret="${{ secrets.GINI_MOBILE_TEST_CLIENT_SECRET }}"
+
+      # Run Sonar on both modules
+      - name: SonarQube Scan
+        run: ./gradlew merchant-sdk:sdk:sonar merchant-sdk:example-app:sonar --info --stacktrace
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/merchant-sdk.publish.firebase.example.yml

@@ -23,6 +23,7 @@ jobs:
     secrets:
       GINI_MOBILE_TEST_CLIENT_SECRET: ${{ secrets.GINI_MOBILE_TEST_CLIENT_SECRET }}
       MERCHANT_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD: ${{ secrets.MERCHANT_SDK_EXAMPLE_APP_KEYSTORE_PASSWORD }}
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
   publish_to_firebase_distribution:
     needs: check