Skip SonarCloud analysis for pull requests from forks

[AkaZver]

Problem

Workflows triggered by pull requests from forks do not receive repository secrets (GitHub only passes GITHUB_TOKEN). As a result, secrets.SONAR_TOKEN resolves to an empty string and the sonarqube task fails with:

Not authorized or project not found. Please check the 'SONAR_TOKEN' environment variable...

This happened, for example, in the run for PR #34.

Change

Skip the sonarcloud job for pull requests whose head branch lives in a fork:

if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository

Resulting behavior

• PRs from branches of this repository — SonarCloud analysis runs automatically, as before.
• PRs from forks — the sonarcloud job is skipped, so the workflow finishes green instead of failing. The fork's code gets analyzed right after the merge, when the push to master triggers the analysis.
• Pushes to master and tags — unchanged; the publish-* jobs still depend on sonarcloud as before.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud