fix: disable SonarCloud analysis for external pull requests

Author: vbreuss

.github/workflows/ci-analysis.yml

@@ -67,6 +67,29 @@ jobs:
             ./Artifacts/*
             ./TestResults/*.trx
   
+  static-code-analysis:
+    name: "Static code analysis"
+    if: ${{ github.actor != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name }}
+    runs-on: ubuntu-latest
+    env:
+      REPORTGENERATOR_LICENSE: ${{ secrets.REPORTGENERATOR_LICENSE }}
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      DOTNET_NOLOGO: true
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Setup .NET SDKs
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: |
+            6.0.x
+            7.0.x
+            8.0.x
+            9.0.x
+      - name: Run sonarcloud analysis
+        run: ./build.sh CodeAnalysis
+  
   publish-test-results:
     name: "Publish Tests Results"
     needs: [ api-tests, unit-tests ]
@@ -84,4 +107,4 @@ jobs:
         uses: EnricoMi/publish-unit-test-result-action@v2
         with:
           comment_mode: always
-          files: "artifacts/**/**/*.trx"
+          files: "artifacts/**/**/*.trx"

.github/workflows/ci.yml

@@ -38,7 +38,6 @@ Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "workflows", "workflows", "{
 	ProjectSection(SolutionItems) = preProject
 		.github\workflows\build.yml = .github\workflows\build.yml
 		.github\workflows\ci.yml = .github\workflows\ci.yml
-		.github\workflows\ci-analysis.yml = .github\workflows\ci-analysis.yml
 	EndProjectSection
 EndProject
 Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "src", "src", "{B66A0B3F-6A00-482E-99E2-27D8DECB075E}"