Black Duck integration and CI/SonarQube updates

[nikhil2611]

Description

This pull request introduces new configuration files to improve the project's Continuous Integration (CI) and code quality analysis processes. The first file sets up a GitHub Actions workflow stub for standardized CI checks on pull requests and pushes to key branches. The second file adds a SonarQube configuration, enabling automated code quality and security scanning for Ruby code in the repository.

CI/CD workflow enhancements:

• Added .github/workflows/ci-main-pull-request-stub.yml to standardize CI checks for pull requests and pushes to main, develop, and release/** branches, leveraging a shared workflow and enabling security, quality, and compliance scans such as Trivy, Trufflehog, BlackDuck Polaris, and SonarQube.

Code quality and analysis configuration:

• Updated sonar-project.properties to configure SonarQube analysis for the repository, specifying project metadata, Ruby language settings, source and test directories, and exclusions for non-Ruby files. This enables automated code quality and security analysis integrated with SonarQube.

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Chore (non-breaking change that does not add functionality or fix an issue)

Checklist:

• I have read the CONTRIBUTING document.
• I have run the pre-merge tests locally and they pass.
• I have updated the documentation accordingly.
• I have added tests to cover my changes.
• If Gemfile.lock has changed, I have used --conservative to do it and included the full output in the Description above.
• All new and existing tests passed.
• All commits have been signed-off for the Developer Certificate of Origin.

[sonarqube-for-infrastructure-prod]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube