Revert Merge of CWA Fork (#34)

* Revert Merge

* Add missing dependency

.github/workflows/ci-main.yml

@@ -1,6 +1,5 @@
 name: ci-main
 on:
-  workflow_dispatch:
   push:
     branches:
     - main
@@ -49,23 +48,9 @@ jobs:
         --password-stdin
         docker build . \
         --file ./Dockerfile \
-        --tag "${APP_PACKAGES_URL}:${APP_VERSION}" \
-        --tag "${TRUSTED_URL}/${TRUSTED_REPOSITORY}/cwa-dcc-rules:${APP_VERSION}"
+        --tag "${APP_PACKAGES_URL}:${APP_VERSION}"
         docker push "${APP_PACKAGES_URL}:${APP_VERSION}"
       env:
         APP_PACKAGES_URL: docker.pkg.github.com/${{ github.repository }}/dgca-businessrule-service
         APP_PACKAGES_USERNAME: ${{ github.actor }}
         APP_PACKAGES_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
-        TRUSTED_URL: ${{ secrets.TRUSTED_URL }}
-        TRUSTED_REPOSITORY: ${{ secrets.TRUSTED_REPOSITORY }}
-    - name: docker push trusted
-      run: |
-        echo ${TRUSTED_TOKEN} | docker login ${TRUSTED_URL} -u ${TRUSTED_USER} --password-stdin
-        docker push ${TRUSTED_URL}/${TRUSTED_REPOSITORY}/cwa-dcc-rules:${APP_VERSION}
-      env:
-        TRUSTED_KEY: ${{ secrets.TRUSTED_KEY }}
-        TRUSTED_URL: ${{ secrets.TRUSTED_URL }}
-        TRUSTED_SERVER_URL: ${{ secrets.TRUSTED_SERVER_URL }}
-        TRUSTED_REPOSITORY: ${{ secrets.TRUSTED_REPOSITORY }}
-        TRUSTED_USER: ${{ secrets.TRUSTED_USER }}
-        TRUSTED_TOKEN: ${{ secrets.TRUSTED_TOKEN }}

.github/workflows/ci-sonar.yml

@@ -0,0 +1,39 @@
+name: ci-sonar
+on:
+  push:
+    branches:
+    - main
+  pull_request:
+    types:
+    - opened
+    - synchronize
+    - reopened
+jobs:
+  sonar:
+    runs-on: ubuntu-20.04
+    steps:
+    - uses: actions/setup-java@v2
+      with:
+        java-version: 11
+        distribution: adopt
+    - uses: actions/checkout@v2
+      with:
+        fetch-depth: 0
+    - uses: actions/cache@v2
+      with:
+        path: |
+          ~/.m2/repository
+        key: ${{ runner.os }}-${{ hashFiles('**/pom.xml') }}
+    - name: mvn
+      run: |-
+        mvn verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar \
+        --batch-mode \
+        --file ./pom.xml \
+        --settings ./settings.xml \
+        --define app.packages.username="${APP_PACKAGES_USERNAME}" \
+        --define app.packages.password="${APP_PACKAGES_PASSWORD}"
+      env:
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        APP_PACKAGES_USERNAME: ${{ github.actor }}
+        APP_PACKAGES_PASSWORD: ${{ secrets.GITHUB_TOKEN }}