diff --git a/.cirrus/wss-unified-agent.config b/.cirrus/wss-unified-agent.config deleted file mode 100644 index d23b6de..0000000 --- a/.cirrus/wss-unified-agent.config +++ /dev/null @@ -1,4 +0,0 @@ -docker.projectNameFormat=repositoryNameAndTag -docker.scanImages=true -wss.url=https://saas-eu.whitesourcesoftware.com/agent -productName=GitHubAction/SonarCloudGitHubAction diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 3f43f0d..e182dab 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1 +1 @@ -.github/CODEOWNERS @sonarsource/analysis-experience-squad +.github/CODEOWNERS @sonarsource/orchestration-processing-squad diff --git a/.github/workflows/PullRequestClosed.yml b/.github/workflows/PullRequestClosed.yml index b50896e..1bf2140 100644 --- a/.github/workflows/PullRequestClosed.yml +++ b/.github/workflows/PullRequestClosed.yml @@ -5,16 +5,15 @@ on: types: [closed] jobs: - PullRequestMerged_job: - name: Pull Request Merged - runs-on: ubuntu-latest + PullRequestClosed_job: + name: Pull Request Closed + runs-on: github-ubuntu-latest-s permissions: id-token: write pull-requests: read # For external PR, ticket should be moved manually if: | github.event.pull_request.head.repo.full_name == github.repository - && github.event.pull_request.merged steps: - id: secrets uses: SonarSource/vault-action-wrapper@v3 diff --git a/.github/workflows/PullRequestCreated.yml b/.github/workflows/PullRequestCreated.yml index fc20e4a..1e00ed0 100644 --- a/.github/workflows/PullRequestCreated.yml +++ b/.github/workflows/PullRequestCreated.yml @@ -7,7 +7,7 @@ on: jobs: PullRequestCreated_job: name: Pull Request Created - runs-on: ubuntu-latest + runs-on: github-ubuntu-latest-s permissions: id-token: write # For external PR, ticket should be created manually diff --git a/.github/workflows/RequestReview.yml b/.github/workflows/RequestReview.yml index 5eac0d5..eb1425d 100644 --- a/.github/workflows/RequestReview.yml +++ b/.github/workflows/RequestReview.yml @@ -7,7 +7,7 @@ on: jobs: RequestReview_job: name: Request review - runs-on: ubuntu-latest + runs-on: github-ubuntu-latest-s permissions: id-token: write # For external PR, ticket should be moved manually diff --git a/.github/workflows/SubmitReview.yml b/.github/workflows/SubmitReview.yml index d5f22e6..d5b18a7 100644 --- a/.github/workflows/SubmitReview.yml +++ b/.github/workflows/SubmitReview.yml @@ -7,7 +7,7 @@ on: jobs: SubmitReview_job: name: Submit Review - runs-on: ubuntu-latest + runs-on: github-ubuntu-latest-s permissions: id-token: write pull-requests: read diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml index 5fc2cbf..499388d 100644 --- a/.github/workflows/qa.yml +++ b/.github/workflows/qa.yml @@ -54,7 +54,7 @@ jobs: scannerVersionTest: name: > 'scannerVersion' input - runs-on: ubuntu-latest # assumes default RUNNER_ARCH for linux is X64 + runs-on: github-ubuntu-latest-s # assumes default RUNNER_ARCH for linux is X64 steps: - uses: actions/checkout@v4 with: @@ -74,7 +74,7 @@ jobs: scannerBinariesUrlTest: name: > 'scannerBinariesUrl' input with invalid URL - runs-on: ubuntu-latest # assumes default RUNNER_ARCH for linux is X64 + runs-on: github-ubuntu-latest-s # assumes default RUNNER_ARCH for linux is X64 steps: - uses: actions/checkout@v4 with: diff --git a/.github/workflows/update-tags.yml b/.github/workflows/update-tags.yml index a07d193..be85366 100644 --- a/.github/workflows/update-tags.yml +++ b/.github/workflows/update-tags.yml @@ -7,7 +7,7 @@ on: jobs: generate: - runs-on: ubuntu-latest + runs-on: github-ubuntu-latest-s permissions: contents: write diff --git a/README.md b/README.md index 7a40440..07af29f 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ > [!WARNING] > This action is deprecated and will be removed in a future release. > Please use the `sonarqube-scan-action` action instead. -> The `sonarqube-scan-action` is a drop-in replacement for this action. +> The `sonarqube-scan-action` is a drop-in replacement for this action, you can find it [here](https://github.com/marketplace/actions/official-sonarqube-scan). This SonarSource project, available as a GitHub Action, scans your projects with SonarQube [Cloud](https://www.sonarsource.com/products/sonarcloud/). diff --git a/action.yml b/action.yml index 4ea3284..eefd987 100644 --- a/action.yml +++ b/action.yml @@ -15,7 +15,8 @@ inputs: scannerVersion: description: Version of the Sonar Scanner CLI to use required: false - default: 6.2.1.4610 + # to be kept in sync with the default version in the sonarqube-scan-action + default: 7.0.2.4839 scannerBinariesUrl: description: URL to download the Sonar Scanner CLI binaries from required: false @@ -28,7 +29,7 @@ runs: run: | echo "::warning title=SonarScanner::This action is deprecated and will be removed in a future release. Please use the sonarqube-scan-action action instead. The sonarqube-scan-action is a drop-in replacement for this action." - name: SonarQube Cloud Scan - uses: SonarSource/sonarqube-scan-action@v4.1.0 + uses: SonarSource/sonarqube-scan-action@v5.0.0 with: args: ${{ inputs.args }} projectBaseDir: ${{ inputs.projectBaseDir }}