Repository navigation
First tagged release.
- SonarQube scan with
SonarSource/sonarqube-scan-actionv8 (pinned to a commit SHA). v8 verifies the scanner's GPG signature by default. - Token inputs reach the shell through
env:. Fork runs are skipped. - Lint & scan workflow (actionlint, zizmor) and the standard PR title check.