Add sonarqube

.github/actions/ci_instrumented_tests/action.yml

@@ -31,6 +31,9 @@ runs:
         chmod 777 emulator.log
         adb logcat -s "WalletConnectV2" >> emulator.log &
 
+    - name: Accept Android Licenses
+      uses: SimonMarquis/android-accept-licenses@v1
+
     - name: Run instrumented tests
       shell: bash
       env:

.github/actions/ci_setup/action.yml

@@ -42,11 +42,26 @@ runs:
         architecture: x86_64
         cache: 'gradle'
 
-    - name: Create Google Services Json File
+    - name: Accept Android Licenses
+      uses: SimonMarquis/android-accept-licenses@v1
+
+    - name: Create Google Services Json File - Wallet
+      shell: bash
+      env:
+        GOOGLE_SERVICES_JSON: ${{ inputs.GOOGLE_SERVICES_JSON }}
+      run: echo $GOOGLE_SERVICES_JSON > ./sample/wallet/google-services.json
+
+    - name: Create Google Services Json File - Dapp
+      shell: bash
+      env:
+        GOOGLE_SERVICES_JSON: ${{ inputs.GOOGLE_SERVICES_JSON }}
+      run: echo $GOOGLE_SERVICES_JSON > ./sample/dapp/google-services.json
+
+    - name: Create Google Services Json File - Modal
       shell: bash
       env:
         GOOGLE_SERVICES_JSON: ${{ inputs.GOOGLE_SERVICES_JSON }}
-      run: echo $GOOGLE_SERVICES_JSON > ./sample/${{ matrix.conf.name}}/google-services.json
+      run: echo $GOOGLE_SERVICES_JSON > ./sample/modal/google-services.json
 
     - name: Create Firebase Service Credentials file
       shell: bash
@@ -66,23 +81,20 @@ runs:
         ENCODED_STRING_DEBUG: ${{ inputs.ENCODED_STRING_DEBUG }}
         SIGNING_KEY_STORE_PATH_DEBUG: ${{ inputs.SIGNING_KEY_STORE_PATH_DEBUG }}
       run: |
-        echo $ENCODED_STRING_DEBUG > keystore-b64-debug.txt
-        base64 -d keystore-b64-debug.txt > $SIGNING_KEY_STORE_PATH_DEBUG
+        echo $ENCODED_STRING_DEBUG | base64 --decode > $SIGNING_KEY_STORE_PATH_DEBUG
 
     - name: Decode Internal Keystore
       shell: bash
       env:
         ENCODED_STRING_INTERNAL: ${{ inputs.ENCODED_STRING_INTERNAL }}
         SIGNING_KEY_STORE_PATH_INTERNAL: ${{ inputs.SIGNING_KEY_STORE_PATH_INTERNAL }}
       run: |
-        echo $ENCODED_STRING_INTERNAL > keystore-b64-internal.txt
-        base64 -d keystore-b64-internal.txt > $SIGNING_KEY_STORE_PATH_INTERNAL
+        echo $ENCODED_STRING_INTERNAL | base64 --decode > $SIGNING_KEY_STORE_PATH_INTERNAL
 
     - name: Decode Upload Keystore
       shell: bash
       env:
         ENCODED_STRING_UPLOAD: ${{ inputs.ENCODED_STRING_UPLOAD }}
         SIGNING_KEY_STORE_PATH_UPLOAD: ${{ inputs.SIGNING_KEY_STORE_PATH_UPLOAD }}
       run: |
-        echo $ENCODED_STRING_UPLOAD > keystore-b64.txt
-        base64 -d keystore-b64.txt > $SIGNING_KEY_STORE_PATH_UPLOAD
+        echo $ENCODED_STRING_UPLOAD | base64 --decode > $SIGNING_KEY_STORE_PATH_UPLOAD

.github/workflows/ci_db_migrations.yml

@@ -24,7 +24,6 @@ jobs:
           { name: Android-Core SDK, command: ":core:android:verifyDebugAndroidCoreDatabaseMigration" },
           { name: Sign SDK, command: ":protocol:sign:verifyDebugSignDatabaseMigration" },
           { name: Auth SDK, command: ":protocol:auth:verifyDebugAuthDatabaseMigration" },
-          { name: Chat SDK, command: ":protocol:chat:verifyDebugChatDatabaseMigration" },
           { name: Notify SDK, command: ":protocol:notify:verifyDebugNotifyDatabaseMigration" },
         ]
     name: ${{ matrix.conf.name }}

.github/workflows/ci_instrumented_tests.yml

@@ -31,7 +31,7 @@ concurrency:
 jobs:
   sdk_tests:
     name: Run Instrumented Tests
-    runs-on: macos-latest-xlarge
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
         with:
@@ -60,10 +60,24 @@ jobs:
           check_changes "protocol/sign" "SIGN_MODULE_CHANGED"
           check_changes "protocol/notify" "NOTIFY_MODULE_CHANGED"
 
-      - name: Fetch Properties File
-        env:
+      - name: Setup Required files to build SDKs
+        with:
+          GOOGLE_SERVICES_JSON: ${{ secrets.GOOGLE_SERVICES_JSON }}
+          FIREBASE_SERVICE_CREDENTIALS: ${{ secrets.FIREBASE_SERVICE_CREDENTIALS }}
           SECRETS_PROPERTIES: ${{ secrets.SECRETS_PROPERTIES }}
-        run: echo $SECRETS_PROPERTIES | base64 --decode > secrets.properties
+          ENCODED_STRING_DEBUG: ${{ secrets.WC_KOTLIN_DEBUG_KEYSTORE }}
+          SIGNING_KEY_STORE_PATH_DEBUG: ${{ secrets.WC_KOTLIN_DEBUG_KEYSTORE_PATH }}
+          ENCODED_STRING_INTERNAL: ${{ secrets.WC_KOTLIN_INTERNAL_KEYSTORE }}
+          SIGNING_KEY_STORE_PATH_INTERNAL: ${{ secrets.WC_KOTLIN_INTERNAL_KEYSTORE_PATH }}
+          ENCODED_STRING_UPLOAD: ${{ secrets.WC_KOTLIN_UPLOAD_KEYSTORE }}
+          SIGNING_KEY_STORE_PATH_UPLOAD: ${{ secrets.WC_KOTLIN_UPLOAD_KEYSTORE_PATH }}
+        uses: ./.github/actions/ci_setup
+
+      - name: Enable KVM group perms
+        run: |
+          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
+          sudo udevadm control --reload-rules
+          sudo udevadm trigger --name-match=kvm
 
       - name: Run Core instrumented tests
         if: ${{ steps.what_modules_changed.outputs.CORE_MODULE_CHANGED == 'true' || github.event_name == 'workflow_dispatch' }}

.github/workflows/ci_sonarcloud.yml

@@ -0,0 +1,65 @@
+name: SonarCloud
+
+on:
+  push:
+    branches:
+      - develop
+      - master
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+concurrency:
+  # Support push/pr as event types with different behaviors each:
+  # 1. push: queue up builds by branch
+  # 2. pr: only allow one run per PR
+  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.event.pull_request.number || github.ref_name }}
+  # If there is already a workflow running for the same pull request, cancel it
+  # For non-PR triggers queue up builds
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  build:
+    if: ${{ github.event_name == 'push' || github.event.pull_request.base.ref == 'develop' }}
+    name: Build and analyze
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v3
+        with:
+          java-version: 17
+          distribution: 'zulu'
+
+      - name: Cache SonarCloud packages
+        uses: actions/cache@v3
+        with:
+          path: ~/.sonar/cache
+          key: ${{ runner.os }}-sonar
+          restore-keys: ${{ runner.os }}-sonar
+
+      - name: Cache Gradle packages
+        uses: actions/cache@v3
+        with:
+          path: ~/.gradle/caches
+          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}
+          restore-keys: ${{ runner.os }}-gradle
+
+      - name: Setup Required files to build samples
+        with:
+          GOOGLE_SERVICES_JSON: ${{ secrets.GOOGLE_SERVICES_JSON }}
+          FIREBASE_SERVICE_CREDENTIALS: ${{ secrets.FIREBASE_SERVICE_CREDENTIALS }}
+          SECRETS_PROPERTIES: ${{ secrets.SECRETS_PROPERTIES }}
+          ENCODED_STRING_DEBUG: ${{ secrets.WC_KOTLIN_DEBUG_KEYSTORE }}
+          SIGNING_KEY_STORE_PATH_DEBUG: ${{ secrets.WC_KOTLIN_DEBUG_KEYSTORE_PATH }}
+          ENCODED_STRING_INTERNAL: ${{ secrets.WC_KOTLIN_INTERNAL_KEYSTORE }}
+          SIGNING_KEY_STORE_PATH_INTERNAL: ${{ secrets.WC_KOTLIN_INTERNAL_KEYSTORE_PATH }}
+          ENCODED_STRING_UPLOAD: ${{ secrets.WC_KOTLIN_UPLOAD_KEYSTORE }}
+          SIGNING_KEY_STORE_PATH_UPLOAD: ${{ secrets.WC_KOTLIN_UPLOAD_KEYSTORE_PATH }}
+        uses: ./.github/actions/ci_setup
+
+      - name: Build and analyze
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: ./gradlew jacocoDebugTestReport --stacktrace sonar --stacktrace

build.gradle.kts

@@ -1,9 +1,11 @@
 import com.android.build.gradle.BaseExtension
+import org.sonarqube.gradle.SonarExtension
 
 plugins {
     id("io.github.gradle-nexus.publish-plugin") version "1.1.0"
     id("release-scripts")
     id("version-bump")
+    alias(libs.plugins.sonarqube)
 }
 
 buildscript {
@@ -52,7 +54,38 @@ allprojects {
     }
 }
 
+sonar {
+    properties {
+        properties(
+            mapOf(
+                "sonar.projectKey" to "WalletConnect_WalletConnectKotlinV2",
+                "sonar.organization" to "walletconnect",
+                "sonar.host.url" to "https://sonarcloud.io",
+                "sonar.gradle.skipCompile" to true
+            )
+        )
+    }
+}
+
 subprojects {
+    apply(plugin = rootProject.libs.plugins.sonarqube.get().pluginId)
+
+    extensions.configure<SonarExtension> {
+        setAndroidVariant("debug")
+
+        isSkipProject = name == "bom"
+        properties {
+            properties(
+                mapOf(
+                    "sonar.gradle.skipCompile" to true,
+                    "sonar.sources" to "${projectDir}/src/main/kotlin",
+                    "sonar.java.binaries" to buildDir,
+                    "sonar.coverage.jacoco.xmlReportPaths" to "${buildDir}/reports/jacoco/xml/jacoco.xml"
+                )
+            )
+        }
+    }
+
     afterEvaluate {
         if (hasProperty("android")) {
             extensions.configure(BaseExtension::class.java) {