Create dependabot.yml #58

	name: SonarCloud
	on:
	push:
	branches:
	- main
	pull_request:
	types: [opened, synchronize, reopened]
	jobs:
	sonarcloud:
	name: SonarCloud
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v2
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
	- name: Install Dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements.txt
	pip install coverage
	- name: Run coverage test
	run: \|
	coverage run manage.py test
	coverage xml
	- name: SonarCloud Scan
	uses: SonarSource/sonarcloud-github-action@master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback