ci(forgejo-actions): analyze project with sonarqube

.gitea/workflows/build.yml

@@ -8,6 +8,8 @@ jobs:
     steps:
       - name: Checkout the code
         uses: https://github.com/actions/checkout@v4
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
 
       - name: Set up JDK 21
         uses: https://github.com/actions/setup-java@v4
@@ -35,7 +37,11 @@ jobs:
         run: chmod +x mvnw
 
       - name: Build and run tests
-        run: ./mvnw verify
+        run: ./mvnw verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=quarkus-commons -Dsonar.projectName='quarkus-commons'
+
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }
 
       - name: Upload libs to Gitea Maven Registry
         if: gitea.ref == 'refs/heads/main'