Zachary Sabourin · Martin Lowe
--- a/Jenkinsfile
+++ b/Jenkinsfile

  stages {
-    stage('Build project') {
+    stage('Build with Sonarcloud scan') {
+      when {
+        branch 'main'
+      }
+
+      steps {
+        container('buildcontainer') {
+          readTrusted 'Makefile'
+          readTrusted 'pom.xml'
+          readTrusted 'package.json'
+          sh 'make compile-test-resources'
+          withCredentials([string(credentialsId: 'sonarcloud-token-eclipsefdn-cve-api', variable: 'SONAR_TOKEN')]) {
+              sh 'mvn clean verify -B org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.login=${SONAR_TOKEN}'