fix(interceptor): CodeGuard AST+heuristic dual-layer scan, HEURISTIC_PASS verdict — closes #9 #23

	name: SonarCloud

	on:
	push:
	branches: [main]
	pull_request:
	types: [opened, synchronize, reopened]

	permissions:
	contents: read
	pull-requests: read
	statuses: write

	jobs:
	sonarcloud:
	name: SonarCloud
	runs-on: ubuntu-latest
	if: github.actor != 'dependabot[bot]'

	steps:
	- name: Checkout repository
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	with:
	fetch-depth: 0 # full history for better analysis relevancy
	persist-credentials: false

	- name: Set up Python
	uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
	with:
	python-version: '3.11'

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"
	pip install pytest-asyncio pytest-cov

	- name: Run tests with coverage
	run: \|
	pytest tests/ -v \
	--cov=src/qwed_a2a \
	--cov-report=xml \
	--cov-report=term-missing \
	--tb=short

	- name: SonarCloud Scan
	uses: SonarSource/sonarqube-scan-action@bfd4e558cda28cda6b5defafb9232d191be8c203 # v4.2.1
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Navigation Menu