name: SonarCloud

on:
  push:
    branches: [main]
  pull_request:
    types: [opened, synchronize, reopened]

permissions:
  contents: read

concurrency:
  group: sonarcloud-${{ github.ref }}
  cancel-in-progress: true

jobs:
  sonarcloud:
    # Tracked at @main so org-wide CI improvements propagate without PR churn.
    uses: storytold/craft-common-actions/.github/workflows/sonarcloud.yml@main
    secrets: inherit