From e2246c46cf8316a97dadfb24fbdd02c163ff1816 Mon Sep 17 00:00:00 2001
From: olekhondera <apaxuc83@gmail.com>
Date: Sat, 28 Mar 2026 13:44:19 +0200
Subject: [PATCH] ci: add SonarQube scan with secret token

---
 .woodpecker.yml          | 10 ++++++++++
 sonar-project.properties |  6 ++++++
 2 files changed, 16 insertions(+)
 create mode 100644 sonar-project.properties

diff --git a/.woodpecker.yml b/.woodpecker.yml
index a053712..fc3747f 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -58,6 +58,16 @@ steps:
       - npm test
     depends_on: [install]
 
+  - name: sonar
+    image: bash
+    environment:
+      SONAR_TOKEN:
+        from_secret: sonar_token
+    commands:
+      - export PATH="/opt/sonar-scanner-6.2.1.4610-linux-x64/bin:$PATH"
+      - sonar-scanner -Dsonar.token=$SONAR_TOKEN
+    depends_on: [lint, test]
+
   # Uncomment when deploy script is set up on VPS:
   #
   # - name: deploy
diff --git a/sonar-project.properties b/sonar-project.properties
new file mode 100644
index 0000000..6c575c9
--- /dev/null
+++ b/sonar-project.properties
@@ -0,0 +1,6 @@
+sonar.projectKey=ai-template
+sonar.projectName=AI Template
+sonar.host.url=https://sonar.spektrtest.online
+
+sonar.sources=apps/web,apps/api
+sonar.exclusions=**/node_modules/**,**/.next/**,**/dist/**,**/coverage/**,**/*.config.*,**/public/**