#!/usr/bin/env bash
set -euo pipefail
ROOT=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)
: "${SONAR_TOKEN:?Set SONAR_TOKEN to a SonarQube analysis token for my-test-project}"
cd "$ROOT"
exec sonar-scanner \
  -Dsonar.host.url=http://localhost:9000 \
  -Dsonar.projectKey=my-test-project \
  -Dsonar.sources=. \
  '-Dsonar.exclusions=build/**,downloads/**,images/**,evidence/**,metadata/**,.scannerwork/**,**/*.sarif' \
  -Dsonar.sarifReportPaths=semgrep.sarif \
  -Dsonar.qualitygate.wait=true