SC-27381 Add shadow scan github workflow

[johann-beleites-sonarsource]

No description provided.

[sonarqubecloud]

🤖 Pull Request summary

Adds automated shadow scanning workflow with daily execution.

• New GitHub Actions workflow triggers daily at 1 AM UTC plus manual dispatch
• Integrates Vault for secure Artifactory token management
• Uses mise for Java 17 and Gradle 8.10.1 toolchain management
• Configures Gradle build with sonar analysis using dogfooding actions
• Implements IRIS analysis across multiple SonarQube platforms (Next, SQC-EU, SQC-US)

Focus review on Vault token permissions and cron schedule accuracy.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

🤖 Pull Request summary

Adds automated shadow scanning workflow for cross-platform code analysis.

• GitHub workflow: New daily scheduled workflow at 01:00 UTC with manual trigger support
• Security integration: Vault authentication for Artifactory and SonarCloud token access
• Build tooling: Adds mise configuration for Java 17 and Gradle 8.10.1
• Analysis setup: Manual Gradle SonarCloud scan with hardcoded project parameters
• IRIS integration: Cross-platform analysis comparing Next, SQC-EU, and SQC-US platforms

Review focus: Hardcoded values in the Gradle command should be parameterized for maintainability.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube