Add SonarQube security scanner integraion

.github/workflows/sonar_pr_scan.yml

@@ -0,0 +1,17 @@
+
+name: 'Quality Checks'
+
+on:
+  pull_request:
+    types:
+      - opened
+      - edited
+      - reopened
+      - ready_for_review
+      - synchronize
+    branches: ['master']
+
+jobs:
+  pr_sonarqube:
+    uses: kenshoo/actions/.github/workflows/sonar_scan.yml@master
+    secrets: inherit

.github/workflows/sonar_weekly_scan.yml

@@ -0,0 +1,11 @@
+
+name: 'Weekly Quality Checks'
+
+on:
+  schedule:
+    - cron: '0 3 * * 1'
+
+jobs:
+  weekly_sonarqube:
+    uses: kenshoo/actions/.github/workflows/sonar_scan.yml@master
+    secrets: inherit

sonar-project.properties

@@ -0,0 +1,6 @@
+
+sonar.projectKey=gradle-liquibase-plugin
+
+# relative paths to source directories. More details and properties are described
+# at https://docs.sonarqube.org/latest/project-administration/narrowing-the-focus/ 
+sonar.sources=.