don't run on PRs (requires paid version)

.woodpecker/test.yaml

@@ -47,6 +47,8 @@ steps:
 
   code-analysis:
     image: ghcr.io/j04n-f/sonar-plugin
+    when:
+      - branch: ${CI_REPO_DEFAULT_BRANCH}
     settings:
       sonar_token:
         from_secret: sonarqube-token