Skip to content

ci: consolidate duplicate SonarQube workflows, add quality gate check - #7

Merged
0x5t4l1n merged 2 commits into
mainfrom
ci/pin-sonarqube-actions
Sep 8, 2026
Merged

0x5t4l1n merged 2 commits into
mainfrom
ci/pin-sonarqube-actions

Conversation

@0x5t4l1n

@0x5t4l1n 0x5t4l1n commented Sep 8, 2026

Copy link
Copy Markdown
Owner

build.yml (added by the SonarCloud onboarding wizard) and sonarcloud.yml both scanned on the same push/PR triggers, which would run two competing analyses against the same project. Keep build.yml's SHA-pinned actions and add the missing quality-gate-action step, which is what actually fails the job (and therefore blocks merging) when the SonarCloud quality gate fails - sonarqube-scan-action alone always exits 0 once it uploads results, regardless of gate outcome.

build.yml (added by the SonarCloud onboarding wizard) and
sonarcloud.yml both scanned on the same push/PR triggers, which would
run two competing analyses against the same project. Keep build.yml's
SHA-pinned actions and add the missing quality-gate-action step, which
is what actually fails the job (and therefore blocks merging) when the
SonarCloud quality gate fails - sonarqube-scan-action alone always
exits 0 once it uploads results, regardless of gate outcome.
@semanticdiff-com

semanticdiff-com Bot commented Sep 8, 2026 •

Copy link
Copy Markdown

Review changes with  SemanticDiff

Changed Files
File Status
  .github/workflows/build.yml  0% smaller
  .github/workflows/sonarcloud.yml  0% smaller
  sonar-project.properties Unsupported file format

@coderabbitai

coderabbitai Bot commented Sep 8, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 31 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 9553ad61-1360-42f8-86a2-2f2b9c870282

📥 Commits

Reviewing files that changed from the base of the PR and between 17a2457 and bb952b3.

📒 Files selected for processing (3)
  • .github/workflows/build.yml
  • .github/workflows/sonarcloud.yml
  • sonar-project.properties

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Placeholders (CHANGE_ME_org-key / CHANGE_ME_0x5t4l1n_AURHub) caused
the scan to fail immediately since no such org/project exists. Values
taken from the SonarCloud onboarding wizard's own generated config.
@sonarqubecloud

sonarqubecloud Bot commented Sep 8, 2026

Copy link
Copy Markdown

@0x5t4l1n
0x5t4l1n merged commit e20cb42 into main Sep 8, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant