Sonar config.

Author: jeremy-then

.github/workflows/codeql.yml

@@ -1,53 +1,19 @@
-name: "CodeQL"
-
+name: SonarQube Cloud (PRs)
 on:
-  push:
-    branches: [ "master", "*-rc" ]
   pull_request:
-    branches: [ "master", "*-rc" ]
-  schedule:
-    - cron: "0 0 * * *"
-
-# Declare default permissions as read only.
-permissions: read-all
-
+    types: [opened, synchronize, reopened]
 jobs:
-  analyze:
-    name: Analyze
+  sonar:
     runs-on: ubuntu-latest
-    permissions:
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: [ python, java ]
-
     steps:
-      - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
-
-      - name: Setup Java JDK
-        if: ${{ matrix.language == 'java' }}
-        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 #v4.7.1
+      - uses: actions/checkout@v4
         with:
-          java-version: '17'
-          distribution: 'temurin'
-
-      - name: Before Index (java)
-        if: ${{ matrix.language == 'java' }}
-        run: ./configure.sh
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 #v3.29.5
-        with:
-          languages: ${{ matrix.language }}
-          queries: +security-and-quality
-
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@df559355d593797519d70b90fc8edd5db049e7a2 #v3.29.5
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 #v3.29.5
+          fetch-depth: 0
+      - uses: actions/setup-java@v4
         with:
-          category: "/language:${{ matrix.language }}"
+          distribution: temurin
+          java-version: '17'
+      - name: SonarQube Cloud Scan
+        uses: SonarSource/sonarqube-scan-action@v5
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}