Skip to content

chore(ci): remove SonarCloud CI-based analysis to enable Automatic Analysis#13845

Merged
mzner merged 1 commit into
masterfrom
chore/remove-sonar-cloud-from-ci-to-introduce-automatic-analysis
Jun 5, 2026
Merged

chore(ci): remove SonarCloud CI-based analysis to enable Automatic Analysis#13845
mzner merged 1 commit into
masterfrom
chore/remove-sonar-cloud-from-ci-to-introduce-automatic-analysis

Conversation

@mzner
Copy link
Copy Markdown
Contributor

@mzner mzner commented Jun 5, 2026

Description

Remove CI-based SonarCloud analysis from GitHub Actions workflows to enable SonarCloud's Automatic Analysis mode via the GitHub App integration. This eliminates the need for a SONAR_TOKEN secret in CI runners.

Related Issue

  • N/A

Motivation and Context

SonarCloud's Automatic Analysis mode provides static analysis without requiring a token in CI. This reduces secret exposure surface in GitHub Actions and simplifies the workflow. Coverage data is no longer uploaded automatically, but static analysis (bugs, code smells, security hotspots) continues via SonarCloud's own infrastructure.

How Has This Been Tested?

  • test environment: GitHub Actions workflow syntax validation
  • test case 1: Verified _build.yml and test.yml are valid YAML after changes
  • test case 2: Automatic Analysis toggle becomes available on SonarCloud after merge

@update-docs
Copy link
Copy Markdown

update-docs Bot commented Jun 5, 2026

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

@kw-security
Copy link
Copy Markdown

kw-security commented Jun 5, 2026

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@awabcodes
Copy link
Copy Markdown
Contributor

Please remove passing of the token in the nightly workflow as well

@mzner mzner force-pushed the chore/remove-sonar-cloud-from-ci-to-introduce-automatic-analysis branch from 2e65e02 to bb9b411 Compare June 5, 2026 08:49
@mzner mzner merged commit 39fe1c3 into master Jun 5, 2026
30 of 32 checks passed
@mzner mzner deleted the chore/remove-sonar-cloud-from-ci-to-introduce-automatic-analysis branch June 5, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants