Add PHPStan report for SonarQube analysis

- Add sonar.php.phpstan.reportPaths to sonar-project.properties
- Generate phpstan-report.json in CI php job, sonarqube job, and sonarqube.yml workflow

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -68,7 +68,7 @@ jobs:
         run: php bin/console lint:container
 
       - name: PHPStan
-        run: vendor/bin/phpstan analyse src/ --level=6 --no-progress
+        run: vendor/bin/phpstan analyse src/ --level=6 --no-progress --error-format=json > phpstan-report.json || true
 
       - name: PHP CS Fixer
         run: vendor/bin/php-cs-fixer fix --dry-run --diff
@@ -175,6 +175,9 @@ jobs:
       - name: JS tests with coverage
         run: bun run test:coverage
 
+      - name: PHPStan report
+        run: vendor/bin/phpstan analyse src/ --level=6 --no-progress --error-format=json > phpstan-report.json || true
+
       - name: Create test database
         run: php bin/console doctrine:database:create --env=test --if-not-exists
 

.gitea/workflows/sonarqube.yml

@@ -67,6 +67,9 @@ jobs:
       - name: JS tests with coverage
         run: bun run test:coverage
 
+      - name: PHPStan report
+        run: vendor/bin/phpstan analyse src/ --level=6 --no-progress --error-format=json > phpstan-report.json || true
+
       - name: Build assets
         run: bun run build
 

sonar-project.properties

@@ -5,6 +5,7 @@ sonar.exclusions=vendor/**,node_modules/**,public/build/**,var/**,migrations/**
 sonar.php.version=8.4
 sonar.sourceEncoding=UTF-8
 sonar.php.coverage.reportPaths=coverage.xml
+sonar.php.phpstan.reportPaths=phpstan-report.json
 sonar.tests=tests
 sonar.test.inclusions=tests/**/*.php,tests/js/**/*.test.js
 sonar.javascript.lcov.reportPaths=coverage/lcov.info