sonarqube-scan-action/action.yml
Claire Villard 55e44800a8
Some checks are pending
QA Deprecated C and C++ action / Action outputs (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-1 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-2 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-3 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-4 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-5 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-6 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-7 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-8 (push) Waiting to run
QA Install Build Wrapper action / Action outputs (push) Waiting to run
QA Install Build Wrapper action / Action outputs-1 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-2 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-3 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-4 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-5 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-6 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-7 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-8 (push) Waiting to run
QA Main action / No inputs (push) Waiting to run
QA Main action / No inputs -1 (push) Waiting to run
QA Main action / 'args' input (push) Waiting to run
QA Main action / 'args' input -1 (push) Waiting to run
QA Main action / 'args' input -2 (push) Waiting to run
QA Main action / 'args' input with other command injection variants does not execute command -2 (push) Waiting to run
QA Main action / 'projectBaseDir' input -2 (push) Waiting to run
QA Main action / 'scannerBinariesUrl' input with invalid URL (push) Waiting to run
QA Main action / 'RUNNER_DEBUG' is used (push) Waiting to run
QA Main action / 'RUNNER_DEBUG' is used -1 (push) Waiting to run
Unit tests / test (push) Waiting to run
QA Main action / 'args' input with command injection will fail (push) Waiting to run
QA Main action / 'args' input with command injection will fail -1 (push) Waiting to run
QA Main action / 'args' input with command injection will fail -2 (push) Waiting to run
QA Main action / 'args' input with command injection will fail -3 (push) Waiting to run
QA Main action / 'args' input with command injection will fail -4 (push) Waiting to run
QA Main action / 'args' input with command injection will fail -5 (push) Waiting to run
QA Main action / 'args' input with backticks injection does not execute command (push) Waiting to run
QA Main action / 'args' input with backticks injection does not execute command -1 (push) Waiting to run
QA Main action / 'args' input with backticks injection does not execute command -2 (push) Waiting to run
QA Main action / 'args' input with dollar command injection does not execute command (push) Waiting to run
QA Main action / 'args' input with dollar command injection does not execute command -1 (push) Waiting to run
QA Main action / 'args' input with dollar command injection does not execute command -2 (push) Waiting to run
QA Main action / 'args' input with other command injection variants does not execute command (push) Waiting to run
QA Main action / 'args' input with other command injection variants does not execute command -1 (push) Waiting to run
QA Main action / 'projectBaseDir' input (push) Waiting to run
QA Main action / 'projectBaseDir' input -1 (push) Waiting to run
QA Main action / 'scannerBinariesUrl' is escaped with wget so special chars are not injected in the download command (push) Waiting to run
QA Main action / 'scannerBinariesUrl' is escaped with curl so special chars are not injected in the download command (push) Waiting to run
QA Main action / Don't fail on Gradle project (push) Waiting to run
QA Main action / 'SONARCLOUD_URL' is used -1 (push) Waiting to run
QA Main action / 'SONAR_ROOT_CERT' is converted to truststore -2 (push) Waiting to run
QA Main action / truststore.p12 is updated when present (push) Waiting to run
QA Main action / 'scannerVersion' input validation (push) Waiting to run
QA Scripts / fetch_latest_version.sh (push) Waiting to run
QA Scripts / create_install_path.sh (push) Waiting to run
QA Main action / 'scannerVersion' input (push) Waiting to run
QA Main action / Don't fail on Kotlin Gradle project (push) Waiting to run
QA Main action / Don't fail on Maven project (push) Waiting to run
QA Main action / runAnalysisTest (push) Waiting to run
QA Main action / 'RUNNER_DEBUG' is used -2 (push) Waiting to run
QA Main action / runAnalysisWithCacheTest (push) Waiting to run
QA Main action / 'SONARCLOUD_URL' is used (push) Waiting to run
QA Main action / 'SONARCLOUD_URL' is used -2 (push) Waiting to run
QA Main action / curl performs redirect when scannerBinariesUrl returns 3xx (push) Waiting to run
QA Main action / 'SONAR_ROOT_CERT' is converted to truststore (push) Waiting to run
QA Main action / 'SONAR_ROOT_CERT' is converted to truststore -1 (push) Waiting to run
QA Main action / Analysis takes into account 'SONAR_ROOT_CERT' (push) Waiting to run
QA Scripts / configure_paths.sh (push) Waiting to run
QA Scripts / download.sh (push) Waiting to run
SQSCANGHA-140 Add OpenPGP signature verification for scanner downloads (#235)
2026-04-28 15:49:48 +02:00

33 lines
1 KiB
YAML

name: Official SonarQube Scan
# Warning: changing name would change URL in the marketplace
description: >
Scan your code with SonarQube Server and Cloud to detect issues in 30+ languages. (Formerly SonarQube and SonarCloud)
branding:
icon: check
color: green
inputs:
args:
description: Additional arguments to the Sonar Scanner CLI
required: false
default: ""
projectBaseDir:
description: Set the sonar.projectBaseDir analysis property
required: false
default: "."
scannerVersion:
description: Version of the Sonar Scanner CLI to use
required: false
# to be kept in sync with sonar-scanner-version
default: 8.0.1.6346
scannerBinariesUrl:
description: URL to download the Sonar Scanner CLI binaries from
required: false
default: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli
skipSignatureVerification:
description: Skip GPG signature verification (not recommended for security)
required: false
default: "false"
runs:
using: node24
main: dist/index.js