add sonar workflow config (#2)

.github/workflows/sonar.yaml

@@ -0,0 +1,30 @@
+# This workflow will build a golang project
+# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-go
+
+name: Sonar Report
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: '1.22'
+
+      - name: Generate Sonar Report
+        run: go test -coverpkg=./... -coverprofile=coverage.out -json ./... > sonar-report.json
+
+      - name: Upload coverage reports to Sonar
+        uses: sonarsource/sonarcloud-github-action@master
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

sonar-project.properties

@@ -0,0 +1,12 @@
+sonar.organization = luno
+sonar.projectKey = luno_depgraph
+sonar.projectName = depgraph
+sonar.links.scm = https://github.com/luno/depgraph
+
+sonar.sources = .
+sonar.exclusions=**/*_test.go, **/*pb.go
+sonar.go.coverage.reportPaths = coverage.out
+sonar.go.tests.reportPaths = sonar-report.json
+sonar.tests = .
+sonar.test.inclusions = **/*_test.go
+sonar.test.exclusions=_examples/**/*, **/*pb.go