Add SonarCloud

Author: jerone

.github/workflows/security.yml

@@ -0,0 +1,47 @@
+name: Security
+
+on:
+  push:
+    branches: ["master"]
+    paths-ignore:
+      - "*.md"
+  pull_request:
+    branches: ["master"]
+    paths-ignore:
+      - "*.md"
+  schedule:
+    - cron: "0 12 * * 0"
+  workflow_dispatch:
+
+jobs:
+  sonarcloud:
+    name: Run SonarCloud scanning
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: read # Allows SonarCloud to decorate PRs with analysis results.
+    steps:
+      - uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "21" # SonarCloud requires v17 or higher.
+          check-latest: true
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis.
+      - name: Install dependencies
+        run: npm ci --no-fund
+      - name: Test and coverage
+        run: npm run test
+      - name: SonarCloud Scan
+        uses: sonarsource/sonarcloud-github-action@master
+        if: success() || failure() # Run this step even if previous step failed.
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        with:
+          args: >
+            -Dsonar.projectKey=jerone_turndown-plugin-github-code-snippet
+            -Dsonar.organization=jerone
+            -Dsonar.projectBaseDir=.
+            -Dsonar.sources=./src/
+            -Dsonar.tests=./test/

.vscode/settings.json

@@ -0,0 +1,6 @@
+{
+    "sonarlint.connectedMode.project": {
+        "connectionId": "jerone",
+        "projectKey": "jerone_turndown-plugin-github-code-snippet"
+    }
+}

README.md

@@ -1,6 +1,8 @@
 # [turndown-plugin-github-code-snippet](https://github.com/jerone/turndown-plugin-github-code-snippet/)
 
-A [Turndown](https://github.com/mixmark-io/turndown) plugin to convert [GitHub code snippet in comments](https://help.github.com/articles/creating-a-permanent-link-to-a-code-snippet/) back into normal links. Useful for UserScripts.
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=jerone_turndown-plugin-github-code-snippet&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=jerone_turndown-plugin-github-code-snippet)
+
+> A [Turndown](https://github.com/mixmark-io/turndown) plugin to convert [GitHub code snippet in comments](https://help.github.com/articles/creating-a-permanent-link-to-a-code-snippet/) back into normal links. Useful for UserScripts.
 
 ## Requirements