🐛 fix: use contains() for pull_request event detection in Sonar workflow (#611)

Change pull_request event detection from exact equality to contains()
to properly handle both pull_request and pull_request_target events.

Previously, the workflow used `github.event_name == 'pull_request'`
which failed to match pull_request_target events, causing the
sonar.pullrequest.key parameter to not be set for PRs targeting main.

This change makes the Sonar workflow consistent with the Checkmarx
workflow which already uses contains() for event detection.

Affected configurations:
- Default sonar-scanner (line 72)
- dotnet scanner (line 108)
- maven scanner (line 145)

Author: mandreko-bitwarden

.github/workflows/_sonar.yml

@@ -69,7 +69,7 @@ jobs:
         env:
           SONAR_TOKEN: ${{ steps.get-kv-secrets.outputs.SONAR-TOKEN }}
           SONAR_ARGS: >-
-            ${{ github.event_name == 'pull_request' && format('"-Dsonar.pullrequest.key={0}"', github.event.pull_request.number) || '' }}
+            ${{ contains(github.event_name, 'pull_request') && format('"-Dsonar.pullrequest.key={0}"', github.event.pull_request.number) || '' }}
             ${{ inputs.sonar-test-inclusions != '' && format('"-Dsonar.test.inclusions={0}"', inputs.sonar-test-inclusions) || '' }}
             ${{ inputs.sonar-exclusions != '' && format('"-Dsonar.exclusions={0}"', inputs.sonar-exclusions) || '' }}
             ${{ inputs.sonar-sources != '' && format('"-Dsonar.sources={0}"', inputs.sonar-sources) || '' }}
@@ -105,7 +105,7 @@ jobs:
           _SONAR_EXCLUSIONS: ${{ inputs.sonar-exclusions }}
           _SONAR_SOURCES: ${{ inputs.sonar-sources }}
           _SONAR_TESTS: ${{ inputs.sonar-tests }}
-          _PULL_REQUEST_KEY: ${{ github.event_name == 'pull_request' && github.event.pull_request.number || '' }}
+          _PULL_REQUEST_KEY: ${{ contains(github.event_name, 'pull_request') && github.event.pull_request.number || '' }}
         run: |
           set -euo pipefail
           ARGS=()
@@ -142,7 +142,7 @@ jobs:
           _SONAR_EXCLUSIONS: ${{ inputs.sonar-exclusions }}
           _SONAR_SOURCES: ${{ inputs.sonar-sources }}
           _SONAR_TESTS: ${{ inputs.sonar-tests }}
-          _PULL_REQUEST_KEY: ${{ github.event_name == 'pull_request' && github.event.pull_request.number || '' }}
+          _PULL_REQUEST_KEY: ${{ contains(github.event_name, 'pull_request') && github.event.pull_request.number || '' }}
         run: |
           set -euo pipefail
           ARGS=()