Skip to content

Commit 2010359

Browse files
committed
Update SonarQube workflow action versions
Bump actions/checkout from v3 to v4 and SonarSource/sonarqube-scan-action from v2 to v6 in both backend and frontend analysis jobs for improved compatibility and security.
1 parent 7431b9c commit 2010359

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

.github/workflows/sonarqube.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,12 @@ jobs:
1313
name: SonarQube Backend Analysis
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: actions/checkout@v3
16+
- uses: actions/checkout@v4
1717
with:
1818
fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
1919

2020
- name: SonarQube Scan - Backend
21-
uses: SonarSource/sonarqube-scan-action@v2
21+
uses: SonarSource/sonarqube-scan-action@v6
2222
env:
2323
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_BACKEND }}
2424
SONAR_HOST_URL: https://sonarcloud.io
@@ -32,7 +32,7 @@ jobs:
3232
name: SonarQube Frontend Analysis
3333
runs-on: ubuntu-latest
3434
steps:
35-
- uses: actions/checkout@v3
35+
- uses: actions/checkout@v4
3636
with:
3737
fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
3838

@@ -48,7 +48,7 @@ jobs:
4848
run: npm --prefix src/frontend/static/frontend run check-all
4949

5050
- name: SonarQube Scan - Frontend
51-
uses: SonarSource/sonarqube-scan-action@v2
51+
uses: SonarSource/sonarqube-scan-action@v6
5252
env:
5353
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_FRONTEND }}
5454
SONAR_HOST_URL: https://sonarcloud.io

0 commit comments

Comments
 (0)