Sebastian Nagel created NUTCH-3186:
--------------------------------------
Summary: Split SonarQube workflow in unprivileged build and
privileged analysis part
Key: NUTCH-3186
URL: https://issues.apache.org/jira/browse/NUTCH-3186
Project: Nutch
Issue Type: Bug
Components: build
Affects Versions: 1.23
Reporter: Sebastian Nagel
Fix For: 1.23
The SonarQube workflow defined by {{.github/workflows/sonarcloud.yml}} is run
in a single workflow which has access to repository secrets. By splitting the
workflow in an unprivileged build and privileged part which performs the
analysis and sets the SonarQube status will secure the workflow secrets.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
