Tier 2: Set up SonarQube Quality Gate

[raifdmueller]

Context

As identified in the Risk Radar Assessment, both modules (scripts and website) are Tier 2 and require Tier 2 extended assurance measures.

Measure: SonarQube Quality Gate

Type: Deterministic
Status: ❌ Missing
Required for: Tier 2 — Extended Assurance

What to implement

1. Sign up at sonarcloud.io
2. Import repository to SonarCloud
3. Create sonar-project.properties
4. Add SonarCloud to CI workflow
5. Configure Quality Gate thresholds

Reference

• Risk Radar Documentation
• Tier 2 Mitigations
• SonarCloud Documentation

Acceptance Criteria

• SonarCloud project created
• sonar-project.properties configured
• SonarCloud scan runs in CI
• Quality Gate status visible in PRs
• Current code passes Quality Gate