chore: add sonar scan

.github/workflows/tests.yml

@@ -64,3 +64,9 @@ jobs:
         files: ./coverage.xml
         flags: unittests
         name: GitHub
+
+    - name: SonarCloud Scan
+      uses: SonarSource/sonarcloud-github-action@master
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

README.md

@@ -10,6 +10,8 @@ One time password implementations in Python. HOTP and TOTP.
 [![Github Actions](https://github.com/authlib/otpauth/actions/workflows/tests.yml/badge.svg)](https://github.com/authlib/otpauth/actions/workflows/tests.yml)
 [![PyPI](https://badgen.net/pypi/v/otpauth)](https://pypi.org/project/otpauth)
 [![codecov](https://codecov.io/gh/authlib/otpauth/branch/master/graph/badge.svg?token=pWQIlZ9Ir4)](https://codecov.io/gh/authlib/otpauth)
+[![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=authlib_otpauth&metric=sqale_rating)](https://sonarcloud.io/summary/new_code?id=authlib_otpauth)
+[![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=authlib_otpauth&metric=security_rating)](https://sonarcloud.io/summary/new_code?id=authlib_otpauth)
 
 </div>
 

sonar-project.properties

@@ -0,0 +1,9 @@
+sonar.projectKey=authlib_otpauth
+sonar.organization=authlib
+
+sonar.sources=src
+sonar.sourceEncoding=UTF-8
+sonar.test.inclusions=tests/test_*.py
+
+sonar.python.version=3.8, 3.9, 3.10, 3.11
+sonar.python.coverage.reportPaths=coverage.xml