Skip to content

ci: remove SonarQube scan from CI - #1205

Closed
skudasov wants to merge 1 commit into
mainfrom
remove-sonarqube-ci
Closed

skudasov wants to merge 1 commit into
mainfrom
remove-sonarqube-ci

Conversation

@skudasov

Copy link
Copy Markdown
Contributor

In scope of https://smartcontract-it.atlassian.net/browse/DX-5526 we are sunsetting SonarQube.

Removing the jobs that run sonarsource/sonarqube-scan-action or the shared
smartcontractkit/.github ci-sonarqube-go / ci-sonarqube-ts actions.

The SonarScanner CLI downloaded by these actions bundles a Java runtime that
still trusts the compromised eMudhra roots, and no fixed release is
available yet:

Before merging: if a SonarQube check is a required status check in branch protection or rulesets, remove it there, or this PR (and later ones) will block on it.

…are sunsetting SonarQube.

Removing the jobs that run sonarsource/sonarqube-scan-action or the shared
smartcontractkit/.github ci-sonarqube-go / ci-sonarqube-ts actions.

The SonarScanner CLI downloaded by these actions bundles a Java runtime that
still trusts the compromised eMudhra roots, and no fixed release is
available yet:
- SonarSource/sonarqube-scan-action#287
- SonarSource/sonar-scanner-cli#312
@skudasov
skudasov requested a review from a team as a code owner October 26, 2026 13:08
@changeset-bot

changeset-bot Bot commented Oct 26, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 2a200c3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions

Copy link
Copy Markdown

👋 skudasov, thanks for creating this pull request!

To help reviewers, please consider creating future PRs as drafts first. This allows you to self-review and make any final changes before notifying the team.

Once you're ready, you can mark it as "Ready for review" to request feedback. Thanks!

@skudasov

Copy link
Copy Markdown
Contributor Author

Duplicate of #1204, which is already merged.

@skudasov skudasov closed this Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant