Add code quality & coverage scanner

.github/workflows/build.yml

@@ -3,6 +3,11 @@ permissions:
   contents: read
   pull-requests: write
 on:
+  push:
+    branches:
+      - main
+    tags:
+      - '*'
   pull_request:
     branches:
       - main
@@ -24,4 +29,11 @@ jobs:
           run: go build ./...
 
         - name: Test
-          run: go test ./...
+          run: go test -json -cover -coverprofile=coverage.out -covermode=atomic -v ./... > report.json
+
+        - name: SonarCloud Scan
+          uses: SonarSource/sonarqube-scan-action@v5.0.0
+          env:
+            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+            SONAR_TOKEN : ${{ secrets.SONAR_TOKEN }}
+

README.md

@@ -1,5 +1,11 @@
+
 # go-xmldsig
-XML Digital Signature
+
+[![Build & Test](https://github.com/deb-ict/go-xmldsig/actions/workflows/build.yml/badge.svg)](https://github.com/deb-ict/go-xmldsig/actions/workflows/build.yml)
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=deb-ict_go-xmldsig&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=deb-ict_go-xmldsig)
+[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=deb-ict_go-xmldsig&metric=coverage)](https://sonarcloud.io/summary/new_code?id=deb-ict_go-xmldsig)
+
+XML digital signature
 
 ## Installation
 Install `go-xmldsig` using `go get`:

sonar-project.properties

@@ -0,0 +1,14 @@
+sonar.projectKey=deb-ict_go-xmldsig
+sonar.organization=deb-ict
+
+sonar.projectName=go-xmldsig
+sonar.projectVersion=1.0.0
+
+sonar.sources=.
+sonar.exclusions=**/*_test.go,**/vendor/**,**/node_modules/**
+
+sonar.tests=.
+sonar.test.inclusions=**/*_test.go
+sonar.test.exclusions=**/vendor/**
+sonar.go.coverage.reportPaths=coverage.out
+sonar.go.tests.reportPaths=report.json