Activate Sonacloud scan on internal branch merge
Activate Sonacloud scan on internal branch merge

Because Sonacloud's token is stored as an internal GithubAction Secret,
it's not available from a fork. Therefore, pull requests from forks will
not decrypt the secret and fail the CI (see.
https://docs.github.com/en/actions/reference/encrypted-secrets#using-encrypted-secrets-in-a-workflow).

As a mitigation, we only perform sonarcloud scan on an internal branch
merge (dev and master).

https://sonarcloud.io/dashboard?id=CanalTP_navitia

xlqian/navitia,CanalTP/navitia,CanalTP/navitia,xlqian/navitia,CanalTP/navitia,CanalTP/navitia,xlqian/navitia,CanalTP/navitia,Tisseo/navitia,Tisseo/navitia,xlqian/navitia,Tisseo/navitia,Tisseo/navitia,Tisseo/navitia,xlqian/navitia