Merge pull request #54 from CDCgov/story-1075-sonar_this_time_with_fe…

…eling

1075: SonarCloud

.github/workflows/ci.yml

@@ -29,6 +29,8 @@ jobs:
     steps:
 
       - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # helps with Sonar scanning
 
       - uses: actions/setup-go@v5
         with:
@@ -45,6 +47,21 @@ jobs:
         working-directory: operations
         run: terraform fmt -recursive -check
 
+      - name: Unit Tests with Code Coverage
+        run: make unitTests
+
+      - name: Sonar
+        uses: sonarsource/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SFTP_INGESTION_SONAR_TOKEN }}
+        with:
+          projectBaseDir: src
+          args: >
+            -Dsonar.projectKey=CDCgov_reportstream-sftp-ingestion
+            -Dsonar.organization=cdcgov
+            -Dsonar.go.coverage.reportPaths=coverage.out
+
   securityScanAnalyze:
     name: CodeQL Security Scan
     uses: ./.github/workflows/codeql_reusable.yml