Add Detekt to Github Action

Author: TimoPtr

.github/workflows/pr.yml

@@ -72,6 +72,28 @@ jobs:
         with:
           category: "KTlint"
 
+  detekt:
+    needs: [yamllint, lockfiles]
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ./.github/actions/setup-build-env
+        with:
+          cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
+          mock-google-services: "true"
+
+      # Since `build-logic` is added with `includeBuild` we have to call detekt explicitly on `:convention`.
+      - name: Run detekt
+        run: ./gradlew detekt :build-logic:convention:detekt --continue
+
+      - uses: ./.github/actions/upload-sarif-results
+        if: always()
+        with:
+          category: "Detekt"
+
   lint:
     needs: [yamllint, lockfiles]
     runs-on: ubuntu-latest
@@ -102,7 +124,7 @@ jobs:
 
   screenshot_test:
     name: "Screenshot Tests"
-    needs: [lint, lockfiles, ktlint]
+    needs: [lint, lockfiles, ktlint, detekt]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -171,7 +193,7 @@ jobs:
 
   unit_tests:
     name: "Unit Tests"
-    needs: [lint, lockfiles, ktlint]
+    needs: [lint, lockfiles, ktlint, detekt]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -195,7 +217,7 @@ jobs:
 
   instrumentation_test:
     name: "Instrumentation Tests"
-    needs: [lint, lockfiles, ktlint]
+    needs: [lint, lockfiles, ktlint, detekt]
     runs-on: ubuntu-latest
     strategy:
       # We want the result of each device to be reported, so we can't fail-fast