This is an automated email from the ASF dual-hosted git repository. leborchuk pushed a commit to branch REL_2_STABLE in repository https://gitbox.apache.org/repos/asf/cloudberry.git
commit 067a508cc74b5b0d019e23e504c01c417c68e653 Author: Dianjin Wang <[email protected]> AuthorDate: Mon Jul 13 14:06:30 2026 +0800 CI: fix SonarQube action to use ASF-approved pinned version The sonarqube workflow failed because `@v6` of both SonarSource/sonarqube-scan-action and its install-build-wrapper sub-action are not in the ASF allowed actions list. Pin both actions to commit 713881670b6b3676cda39549040e2d88c70d582e (v8.2.0), the latest approved version from apache/infrastructure-actions/actions.yml that has no expiry constraint. --- .github/workflows/sonarqube.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index 93379d184ea..68ffcfbef29 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -83,7 +83,7 @@ jobs: fi - name: Install Build Wrapper - uses: SonarSource/sonarqube-scan-action/install-build-wrapper@v6 + uses: SonarSource/sonarqube-scan-action/install-build-wrapper@713881670b6b3676cda39549040e2d88c70d582e # v8.2.0 - name: Run Build Wrapper run: | @@ -122,7 +122,7 @@ jobs: - name: SonarQube Scan if: ${{ github.event_name != 'pull_request' }} - uses: SonarSource/sonarqube-scan-action@v6 + uses: SonarSource/sonarqube-scan-action@713881670b6b3676cda39549040e2d88c70d582e # v8.2.0 env: SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }} with: --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
