actions/sonarqube-scan-action
2
0
Fork 0
mirror of https://github.com/SonarSource/sonarqube-scan-action.git synced 2025-12-12 17:31:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

BUILD-8875: Migrate to standardized GitHub runner names

Browse source 
Co-authored-by: Julien HENRY <julien.henry@sonarsource.com>
This commit is contained in:
SonarTech 2025-09-02 10:10:38 +02:00 committed by GitHub
parent 1a6d90ebcb
commit 5837ebfcca
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
10 changed files with 40 additions and 40 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.github/workflows/PullRequestClosed.yml vendored
View file

@ -7,7 +7,7 @@ on:
jobs: jobs:
PullRequestClosed_job: PullRequestClosed_job:
name: Pull Request Closed name: Pull Request Closed
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
permissions: permissions:
id-token: write id-token: write
pull-requests: read pull-requests: read

2
.github/workflows/PullRequestCreated.yml vendored
View file

@ -7,7 +7,7 @@ on:
jobs: jobs:
PullRequestCreated_job: PullRequestCreated_job:
name: Pull Request Created name: Pull Request Created
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
permissions: permissions:
id-token: write id-token: write
# For external PR, ticket should be created manually # For external PR, ticket should be created manually

2
.github/workflows/RequestReview.yml vendored
View file

@ -7,7 +7,7 @@ on:
jobs: jobs:
RequestReview_job: RequestReview_job:
name: Request review name: Request review
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
permissions: permissions:
id-token: write id-token: write
# For external PR, ticket should be moved manually # For external PR, ticket should be moved manually

2
.github/workflows/SubmitReview.yml vendored
View file

@ -7,7 +7,7 @@ on:
jobs: jobs:
SubmitReview_job: SubmitReview_job:
name: Submit Review name: Submit Review
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
permissions: permissions:
id-token: write id-token: write
pull-requests: read pull-requests: read

2
.github/workflows/qa-deprecated-c-cpp.yml vendored
View file

@ -12,7 +12,7 @@ jobs:
name: Action outputs name: Action outputs
strategy: strategy:
matrix: matrix:
os: [ubuntu-latest-large, windows-latest-large, macos-latest, macos-13] os: [github-ubuntu-latest-s, github-windows-latest-s, macos-latest, macos-13]
cache: [true, false] cache: [true, false]
include: include:
- arch: X64 - arch: X64

2
.github/workflows/qa-install-build-wrapper.yml vendored
View file

@ -12,7 +12,7 @@ jobs:
name: Action outputs name: Action outputs
strategy: strategy:
matrix: matrix:
os: [ubuntu-latest-large, windows-latest-large, macos-latest, macos-13] os: [github-ubuntu-latest-s, github-windows-latest-s, macos-latest, macos-13]
cache: [true, false] cache: [true, false]
include: include:
- arch: X64 - arch: X64

54
.github/workflows/qa-main.yml vendored
View file

@ -13,7 +13,7 @@ jobs:
No inputs No inputs
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -32,7 +32,7 @@ jobs:
'args' input 'args' input
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -55,7 +55,7 @@ jobs:
'args' input with command injection will fail 'args' input with command injection will fail
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
args: [ -Dsonar.someArg=aValue && echo "Injection", -Dsonar.someArg="value\"; whoami; echo \"" ] args: [ -Dsonar.someArg=aValue && echo "Injection", -Dsonar.someArg="value\"; whoami; echo \"" ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
@ -81,7 +81,7 @@ jobs:
'args' input with backticks injection does not execute command 'args' input with backticks injection does not execute command
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -109,7 +109,7 @@ jobs:
'args' input with dollar command injection does not execute command 'args' input with dollar command injection does not execute command
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -136,7 +136,7 @@ jobs:
'args' input with other command injection variants does not execute command 'args' input with other command injection variants does not execute command
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -166,7 +166,7 @@ jobs:
'projectBaseDir' input 'projectBaseDir' input
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -187,7 +187,7 @@ jobs:
scannerVersionTest: scannerVersionTest:
name: > name: >
'scannerVersion' input 'scannerVersion' input
runs-on: ubuntu-latest-large # assumes default RUNNER_ARCH for linux is X64 runs-on: github-ubuntu-latest-s # assumes default RUNNER_ARCH for linux is X64
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -207,7 +207,7 @@ jobs:
scannerBinariesUrlTest: scannerBinariesUrlTest:
name: > name: >
'scannerBinariesUrl' input with invalid URL 'scannerBinariesUrl' input with invalid URL
runs-on: ubuntu-latest-large # assumes default RUNNER_ARCH for linux is X64 runs-on: github-ubuntu-latest-s # assumes default RUNNER_ARCH for linux is X64
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -235,7 +235,7 @@ jobs:
scannerBinariesUrlIsEscapedWithWget: scannerBinariesUrlIsEscapedWithWget:
name: > name: >
'scannerBinariesUrl' is escaped with wget so special chars are not injected in the download command 'scannerBinariesUrl' is escaped with wget so special chars are not injected in the download command
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -256,7 +256,7 @@ jobs:
scannerBinariesUrlIsEscapedWithCurl: scannerBinariesUrlIsEscapedWithCurl:
name: > name: >
'scannerBinariesUrl' is escaped with curl so special chars are not injected in the download command 'scannerBinariesUrl' is escaped with curl so special chars are not injected in the download command
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -285,7 +285,7 @@ jobs:
dontFailGradleTest: dontFailGradleTest:
name: > name: >
Don't fail on Gradle project Don't fail on Gradle project
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -306,7 +306,7 @@ jobs:
dontFailGradleKotlinTest: dontFailGradleKotlinTest:
name: > name: >
Don't fail on Kotlin Gradle project Don't fail on Kotlin Gradle project
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -327,7 +327,7 @@ jobs:
dontFailMavenTest: dontFailMavenTest:
name: > name: >
Don't fail on Maven project Don't fail on Maven project
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -346,7 +346,7 @@ jobs:
run: | run: |
./test/assertFileExists ./output.properties ./test/assertFileExists ./output.properties
runAnalysisTest: runAnalysisTest:
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
services: services:
sonarqube: sonarqube:
image: sonarqube:lts-community image: sonarqube:lts-community
@ -381,7 +381,7 @@ jobs:
'RUNNER_DEBUG' is used 'RUNNER_DEBUG' is used
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -399,7 +399,7 @@ jobs:
run: | run: |
./test/assertFileContains ./output.properties "sonar.verbose=true" ./test/assertFileContains ./output.properties "sonar.verbose=true"
runAnalysisWithCacheTest: runAnalysisWithCacheTest:
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
services: services:
sonarqube: sonarqube:
image: sonarqube:lts-community image: sonarqube:lts-community
@ -440,7 +440,7 @@ jobs:
'SONARCLOUD_URL' is used 'SONARCLOUD_URL' is used
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -459,7 +459,7 @@ jobs:
./test/assertFileContains ./output.properties "sonar.scanner.sonarcloudUrl=mirror.sonarcloud.io" ./test/assertFileContains ./output.properties "sonar.scanner.sonarcloudUrl=mirror.sonarcloud.io"
dontFailWhenMissingWgetButCurlAvailable: dontFailWhenMissingWgetButCurlAvailable:
name: Don't fail when missing wget but curl available name: Don't fail when missing wget but curl available
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -485,7 +485,7 @@ jobs:
./test/assertFileExists ./output.properties ./test/assertFileExists ./output.properties
dontFailWhenMissingCurlButWgetAvailable: dontFailWhenMissingCurlButWgetAvailable:
name: Don't fail when missing curl but wget available name: Don't fail when missing curl but wget available
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -512,7 +512,7 @@ jobs:
./test/assertFileExists ./output.properties ./test/assertFileExists ./output.properties
failWhenBothWgetAndCurlMissing: failWhenBothWgetAndCurlMissing:
name: Fail when both wget and curl are missing name: Fail when both wget and curl are missing
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -545,7 +545,7 @@ jobs:
curlPerformsRedirect: curlPerformsRedirect:
name: > name: >
curl performs redirect when scannerBinariesUrl returns 3xx curl performs redirect when scannerBinariesUrl returns 3xx
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -579,7 +579,7 @@ jobs:
'SONAR_ROOT_CERT' is converted to truststore 'SONAR_ROOT_CERT' is converted to truststore
strategy: strategy:
matrix: matrix:
os: [ ubuntu-latest-large, windows-latest-large, macos-latest ] os: [ github-ubuntu-latest-s, github-windows-latest-s, macos-latest ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
@ -631,7 +631,7 @@ jobs:
analysisWithSslCertificate: analysisWithSslCertificate:
name: > name: >
Analysis takes into account 'SONAR_ROOT_CERT' Analysis takes into account 'SONAR_ROOT_CERT'
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -739,7 +739,7 @@ jobs:
overridesScannerLocalFolderWhenPresent: # can happen in uncleaned self-hosted runners overridesScannerLocalFolderWhenPresent: # can happen in uncleaned self-hosted runners
name: > name: >
'SCANNER_LOCAL_FOLDER' is cleaned with warning when present 'SCANNER_LOCAL_FOLDER' is cleaned with warning when present
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -773,7 +773,7 @@ jobs:
updateTruststoreWhenPresent: # can happen in uncleaned self-hosted runners updateTruststoreWhenPresent: # can happen in uncleaned self-hosted runners
name: > name: >
truststore.p12 is updated when present truststore.p12 is updated when present
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -902,7 +902,7 @@ jobs:
scannerVersionValidationTest: scannerVersionValidationTest:
name: > name: >
'scannerVersion' input validation 'scannerVersion' input validation
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:

8
.github/workflows/qa-scripts.yml vendored
View file

@ -10,7 +10,7 @@ on:
jobs: jobs:
create-install-dir-test: create-install-dir-test:
name: create_install_path.sh name: create_install_path.sh
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -107,7 +107,7 @@ jobs:
grep "=== Script failed ===" output grep "=== Script failed ===" output
setup-script-test: setup-script-test:
name: configure_paths.sh name: configure_paths.sh
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
env: env:
INSTALL_PATH: 'install-directory' INSTALL_PATH: 'install-directory'
SONAR_HOST_URL: 'http://sonar-host.com' SONAR_HOST_URL: 'http://sonar-host.com'
@ -250,7 +250,7 @@ jobs:
grep "=== Script failed ===" output grep "=== Script failed ===" output
download-script-test: download-script-test:
name: download.sh name: download.sh
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
@ -319,7 +319,7 @@ jobs:
grep "=== Script failed ===" output grep "=== Script failed ===" output
fetch-latest-version-test: fetch-latest-version-test:
name: fetch_latest_version.sh name: fetch_latest_version.sh
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:

2
.github/workflows/update-tags.yml vendored
View file

@ -7,7 +7,7 @@ on:
jobs: jobs:
generate: generate:
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
permissions: permissions:
contents: write contents: write

4
.github/workflows/version_update.yml vendored
View file

@ -7,7 +7,7 @@ on:
jobs: jobs:
check-version: check-version:
name: Check for sonar-scanner version update name: Check for sonar-scanner version update
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
outputs: outputs:
should_update: ${{ steps.version-check.outputs.should_update }} should_update: ${{ steps.version-check.outputs.should_update }}
new-version: ${{ steps.latest-version.outputs.sonar-scanner-version }} new-version: ${{ steps.latest-version.outputs.sonar-scanner-version }}
@ -43,7 +43,7 @@ jobs:
update-version: update-version:
name: Prepare pull request for sonar-scanner version update name: Prepare pull request for sonar-scanner version update
needs: check-version needs: check-version
runs-on: ubuntu-latest-large runs-on: github-ubuntu-latest-s
permissions: permissions:
contents: write contents: write
pull-requests: write pull-requests: write