Skip to content

ci: add SonarCloud analysis and tighten build workflows - #9

Merged
thedevnoah merged 2 commits into
masterfrom
ci/sonarcloud
Oct 10, 2026
Merged

thedevnoah merged 2 commits into
masterfrom
ci/sonarcloud

Conversation

@spannm

@spannm spannm commented Oct 10, 2026

Copy link
Copy Markdown
Owner

Adds a SonarCloud analysis for figlet, set up like the ones in jackcess and ucanaccess, and tightens the existing workflows while at it.

The Sonar workflow runs the tests with JaCoCo coverage via a new sonarcloud profile, and only on pushes to master, so it won't run for this PR. Before merging, the project io.github.spannm:figlet needs to exist in SonarCloud and the SONAR_TOKEN secret has to be set.

The second commit switches all workflows to ./mvnw, so CI uses the Maven version from the wrapper instead of the one on the runner image. It also adds JDK 21 to the build matrix, keeps forks from running the deploy job and drops the font submodules from the CodeQL checkout.

The Windows jobs are the ones to watch: they now call ./mvnw through Git Bash.

New workflow sonar_jdk17_ubuntu.yml runs the tests with JaCoCo coverage
and the SonarCloud scanner on pushes to master, via the new sonarcloud
profile in the parent pom.
- all workflows call ./mvnw, so the Maven version comes from the
  wrapper instead of the runner image
- deploy skips forks and also runs on workflow_dispatch
- build matrix adds JDK 21 on Ubuntu and Windows
- CodeQL no longer checks out the font submodules
@thedevnoah
thedevnoah merged commit b90fbd1 into master Oct 10, 2026
9 checks passed
@spannm
spannm deleted the ci/sonarcloud branch October 12, 2026 21:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants