name: SonarCloud

on:
  push:
    branches: [main]
  pull_request:
    types: [opened, synchronize, reopened]

permissions:
  contents: read

concurrency:
  group: sonarcloud-${{ github.ref }}
  # A push to main is the run that publishes coverage; superseded runs there would never finish.
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

jobs:
  sonarcloud:
    # Track shared CI improvements on main.
    uses: storytold/craft-common-actions/.github/workflows/sonarcloud.yml@main
    with:
      shards: 8
      python-coverage-source: packaging/linux/flatpak
      python-coverage-script: packaging/linux/flatpak/test_generate_cargo_sources.py
      timeout-minutes: 120
      fonts-ref: b076417b5880bd4154bd22f00695b1d28c6bea83
    secrets: inherit