Run integration connectivity check nightly to catch token expiry early (#208)

[AndreasIgel]

Summary

Adds a nightly schedule trigger to the existing integrations-check.yml so that an expiring/revoked SONAR_TOKEN or CODECOV_TOKEN surfaces as a failed scheduled run (with GitHub's normal failure notification to maintainers) before it silently breaks a real CI or release run. Requested in #208.

The workflow already runs the SonarCloud and Codecov token/connectivity checks as two independent, parallel jobs on manual workflow_dispatch. This PR only adds the schedule and makes the job gates schedule-aware:

on:
  workflow_dispatch: { inputs: { target: [all|sonarcloud|codecov] } }
  schedule:
    - cron: '0 6 * * *'   # nightly 06:00 UTC, default branch only

jobs:
  sonarcloud:
    # dispatch has a target input; scheduled runs have none -> run both checks
    if: ${{ github.event_name == 'schedule' || inputs.target == 'all' || inputs.target == 'sonarcloud' }}
  codecov:
    if: ${{ github.event_name == 'schedule' || inputs.target == 'all' || inputs.target == 'codecov' }}

Scheduled runs carry no dispatch inputs, so without the github.event_name == 'schedule' clause both jobs' if conditions would evaluate false and be skipped — hence the added clause runs all checks on the nightly run. No check logic changed; token values are still never printed and no project/PR code is built. schedule (like workflow_dispatch) only executes from the default branch, so this remains maintainer-gated and never runs for fork PRs.

Related

• Add a maintainer-run workflow to check 3rd-party integration connectivity (SonarCloud/Codecov) #208 (integration connectivity check)

Note: SONAR_TOKEN is currently reported invalid by this check — that token still needs to be fixed/rotated in SonarCloud (tracked in #208); once fixed, the nightly run will go green.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 936ee72.

Ensure that dependencies are being submitted on PR branches. Re-running this action after a short time may resolve the issue. See the documentation for more information and troubleshooting advice.

Scanned Files

None