From 2a200c3c4726e9eb6d18debfd8ea5c617311256b Mon Sep 17 00:00:00 2001 From: skudasov Date: Sun, 25 Oct 2026 14:18:40 +0100 Subject: [PATCH] In scope of https://smartcontract-it.atlassian.net/browse/DX-5526 we are sunsetting SonarQube. Removing the jobs that run sonarsource/sonarqube-scan-action or the shared smartcontractkit/.github ci-sonarqube-go / ci-sonarqube-ts actions. The SonarScanner CLI downloaded by these actions bundles a Java runtime that still trusts the compromised eMudhra roots, and no fixed release is available yet: - https://github.com/SonarSource/sonarqube-scan-action/pull/287 - https://github.com/SonarSource/sonar-scanner-cli/pull/312 --- .github/workflows/pull-request-main.yml | 19 ------------------- .github/workflows/schedule-main.yml | 15 --------------- 2 files changed, 34 deletions(-) diff --git a/.github/workflows/pull-request-main.yml b/.github/workflows/pull-request-main.yml index 3445312a8..8a0ac21db 100644 --- a/.github/workflows/pull-request-main.yml +++ b/.github/workflows/pull-request-main.yml @@ -341,22 +341,3 @@ jobs: artifact-name: catalog-remote-tests env: CATALOG_SERVICE_IMAGE: ${{ secrets.AWS_ACCOUNT_NUMBER_PROD }}.dkr.ecr.${{ secrets.AWS_REGION }}.amazonaws.com/op-catalog-service:${{ steps.get-catalog-tag.outputs.tag }} - - sonarqube: - name: Sonar Scan - if: | - always() && - github.event_name == 'pull_request' && - !contains(needs.*.result, 'failure') && - !contains(needs.*.result, 'cancelled') - runs-on: ubuntu-24.04 - needs: [ci-test, ci-test-operations-gen, ci-test-provider-evm, ci-test-provider-solana, ci-test-provider-aptos, ci-test-provider-sui, ci-test-provider-canton, ci-test-provider-ton, ci-test-provider-tron, ci-test-provider-stellar, ci-test-provider-fast, ci-test-catalog-remote, ci-lint-misc, ci-lint, ci-lint-operations-gen] - permissions: - contents: read - actions: read - steps: - - name: Scan with Sonarqube - uses: smartcontractkit/.github/actions/ci-sonarqube-go@01d931b0455a754d12e7143cc54a5a3521a8f6f6 # ci-sonarqube-go@0.3.1 - with: - sonar-token: ${{ secrets.SONAR_TOKEN }} - sonar-host-url: ${{ secrets.SONAR_HOST_URL }} diff --git a/.github/workflows/schedule-main.yml b/.github/workflows/schedule-main.yml index 2fb7a313b..a1e061441 100644 --- a/.github/workflows/schedule-main.yml +++ b/.github/workflows/schedule-main.yml @@ -130,18 +130,3 @@ jobs: artifact-name: catalog-remote-tests env: CATALOG_SERVICE_IMAGE: ${{ secrets.AWS_ACCOUNT_NUMBER_PROD }}.dkr.ecr.${{ secrets.AWS_REGION }}.amazonaws.com/op-catalog-service:${{ steps.get-catalog-tag.outputs.tag }} - - sonarqube: - name: Sonar Scan - runs-on: ubuntu-24.04 - needs: [ci-test, ci-test-provider, ci-test-catalog-remote, ci-lint-misc, ci-lint] - permissions: - contents: read - actions: read - steps: - - name: Scan with Sonarqube - uses: smartcontractkit/.github/actions/ci-sonarqube-go@01d931b0455a754d12e7143cc54a5a3521a8f6f6 # ci-sonarqube-go@0.3.1 - with: - sonar-token: ${{ secrets.SONAR_TOKEN }} - sonar-host-url: ${{ secrets.SONAR_HOST_URL }} - include-lint: true