ci(forgejo-actions): analyze project with sonarqube

.gitea/workflows/build.yml

@@ -8,6 +8,8 @@ jobs:
     steps:
       - name: Checkout the code
         uses: https://github.com/actions/checkout@v4
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
 
       - name: Set up JDK 21
         uses: https://github.com/actions/setup-java@v4
@@ -37,6 +39,12 @@ jobs:
       - name: Build and run tests
         run: ./mvnw verify
 
+      - name: Analyze with Sonar
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+        run: ./mvnw org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=quarkus-commons -Dsonar.projectName='quarkus-commons' -Dsonar.coverage.jacoco.xmlReportPaths=../**/target/jacoco-report/jacoco.xml
+
       - name: Upload libs to Gitea Maven Registry
         if: gitea.ref == 'refs/heads/main'
         run: ./mvnw deploy -Dmaven.test.skip=true -Dmaven.javadoc.skip=true