Update .gitea/workflows/sonar.yml

.gitea/workflows/sonar.yml

@@ -0,0 +1,45 @@
+name: SonarQube Analysis
+
+on:
+  push:
+    branches:
+      - main
+      - master
+  pull_request:
+    branches:
+      - main
+      - master
+    types:
+      - opened
+      - synchronize
+      - reopened
+
+jobs:
+  sonarqube:
+    name: SonarQube Scan
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Run SonarScanner (Docker v12)
+        run: |
+          # Safely get repository name from current directory
+          PROJECT_KEY=$(basename "$PWD")
+
+          echo "Using project key: $PROJECT_KEY"
+
+          docker run --rm \
+            -v "$PWD:/usr/src" \
+            -w /usr/src \
+            -e SONAR_HOST_URL=${{ secrets.SONARQUBE_HOST }} \
+            -e SONAR_TOKEN=${{ secrets.SONARQUBE_TOKEN }} \
+            sonarsource/sonar-scanner-cli:12 \
+            -Dsonar.projectKey=$PROJECT_KEY \
+            -Dsonar.projectName=$PROJECT_KEY \
+            -Dsonar.sources=. \
+            -Dsonar.exclusions=node_modules/**,dist/**,coverage/** \
+            -Dsonar.qualitygate.wait=true

package-lock.json

@@ -14038,9 +14038,9 @@
       "integrity": "sha1-hnrHTjhkGHsdPUfZlqeOxciDB3c="
     },
     "ua-parser-js": {
-      "version": "0.7.33",
-      "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.33.tgz",
-      "integrity": "sha512-s8ax/CeZdK9R/56Sui0WM6y9OFREJarMRHqLB2EwkovemBxNQ+Bqu8GAsUnVcXKgphb++ghr/B2BZx4mahujPw=="
+      "version": "0.7.31",
+      "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.31.tgz",
+      "integrity": "sha512-qLK/Xe9E2uzmYI3qLeOmI0tEOt+TBBQyUIAh4aAgU05FVYzeZrKUdkAZfBNVGRaHVgV0TDkdEngJSw/SyQchkQ=="
     },
     "uglify-js": {
       "version": "3.1.1",