Skip to content

SonarCloud Integration

CI runs Vitest coverage with LCOV output at coverage/lcov.info and waits for the SonarCloud quality gate. Missing SONAR_TOKEN is a CI failure, not a silent skip.

Scope

  • Sources: packages
  • Tests: packages/*/src/**/*.test.ts
  • sonar.exclusions: packages/*/dist/**, coverage/**, .devplat/**, packages/*/schemas/*.schema.json, site/**, deploy/**, docker/**
  • sonar.coverage.exclusions: packages/*/src/**/*.test.ts

Operator Notes

  • Keep SONAR_TOKEN configured in GitHub Actions
  • Use npm run verify:sonar-bootstrap for bootstrap validation
  • Use npm run check:changed-coverage before opening or updating a pull request so changed executable files do not arrive at Sonar uncovered
  • Quality gate failures should stop the primary CI lane