코드 품질: SonarQube + Checkstyle

plugins {
    id 'checkstyle'
}

checkstyle {
    toolVersion = '10.12.0'
    configFile = file('config/checkstyle/checkstyle.xml')
    maxWarnings = 0  // 경고 0건 강제
}

// 컴파일 시 자동 실행
check.dependsOn checkstyleMain, checkstyleTest

<!-- config/checkstyle/checkstyle.xml -->
<module name="Checker">
    <module name="LineLength">
        <property name="max" value="120"/>
    </module>
    <module name="TreeWalker">
        <module name="Indentation">
            <property name="basicOffset" value="4"/>
        </module>
        <module name="UnusedImports"/>
        <module name="MissingJavadocMethod"/>
    </module>
</module>

plugins {
    id 'jacoco'
}

jacoco {
    toolVersion = '0.8.11'
}

jacocoTestReport {
    dependsOn test
    reports {
        xml.required = true
        html.required = true
    }
}

jacocoTestCoverageVerification {
    violationRules {
        rule {
            limit {
                counter = 'LINE'
                minimum = 0.80  // 80% 이상
            }
            limit {
                counter = 'BRANCH'
                minimum = 0.70
            }
        }
    }
}

check.dependsOn jacocoTestCoverageVerification

plugins {
    id 'org.sonarqube' version '4.4.1.3373'
}

sonar {
    properties {
        property "sonar.projectKey", "ohs-backend"
        property "sonar.organization", "myorg"
        property "sonar.host.url", "https://sonarcloud.io"
        property "sonar.coverage.jacoco.xmlReportPaths",
                 "build/reports/jacoco/test/jacocoTestReport.xml"
    }
}

// 실행
// ./gradlew test jacocoTestReport sonar

plugins {
    id 'com.github.spotbugs' version '6.0.7'
}

spotbugs {
    excludeFilter = file('config/spotbugs/exclude.xml')
    effort = 'max'
    reportLevel = 'high'
}

tasks.spotbugsMain {
    reports.create('html') {
        required = true
        outputLocation = file("$buildDir/reports/spotbugs/main.html")
    }
}

# .github/workflows/quality.yml
name: Code Quality

on:
  pull_request:
    branches: [main]

jobs:
  quality:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/setup-java@v4
        with:
          java-version: '21'
          distribution: 'temurin'

      - name: Run quality checks
        run: |
          ./gradlew check \
            checkstyleMain \
            jacocoTestCoverageVerification \
            spotbugsMain

      - name: SonarCloud
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        run: ./gradlew sonar

      - name: Comment on PR
        if: failure()
        uses: actions/github-script@v7
        with:
          script: |
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: '❌ 품질 게이트 실패. Checkstyle/JaCoCo/SpotBugs 확인 필요.'
            })