Repository navigation
ci: remove SonarQube scan from CI - #1204
Conversation
…are sunsetting SonarQube. Removing the jobs that run sonarsource/sonarqube-scan-action or the shared smartcontractkit/.github ci-sonarqube-go / ci-sonarqube-ts actions. The SonarScanner CLI downloaded by these actions bundles a Java runtime that still trusts the compromised eMudhra roots, and no fixed release is available yet: - SonarSource/sonarqube-scan-action#287 - SonarSource/sonar-scanner-cli#312
|
|
👋 skudasov, thanks for creating this pull request! To help reviewers, please consider creating future PRs as drafts first. This allows you to self-review and make any final changes before notifying the team. Once you're ready, you can mark it as "Ready for review" to request feedback. Thanks! |
In scope of https://smartcontract-it.atlassian.net/browse/DX-5526 we are sunsetting SonarQube.
Removing the jobs that run sonarsource/sonarqube-scan-action or the shared
smartcontractkit/.github ci-sonarqube-go / ci-sonarqube-ts actions.
The SonarScanner CLI downloaded by these actions bundles a Java runtime that
still trusts the compromised eMudhra roots, and no fixed release is
available yet:
Before merging: if a SonarQube check is a required status check in branch protection or rulesets, remove it there, or this PR (and later ones) will block on it.