This CDK construct creates an AWS Codebuild action to perform static code analysis using Sonarcloud.

Getting started

Here is how to include the construct in your CDK code :
``javascript
const sonarcloudScan = new CDKCodeBuildSonarcloud(this, 'SonarcloudBuildAction', {
sourceOutput: sourceOutput,
sonarOrganizationName: 'my-sonarcloud-organization-name',
sonarProjectName: 'my-sonarcloud-project-name',
});
``
Check Here for an example on how to use the construct.

Security

A Sonarcloud account is required to use this construct. Create a Sonarcloud token to connect securely to Sonarcloud from AWS CodeBuild. Store this token in your AWS account in AWS Secret Manager, name the secret "sonar-token" and use "SONAR_TOKEN" as the secret key.

Please review the AWS Secret Manager security best practices in order to securely create and manage your secret.