-
Notifications
You must be signed in to change notification settings - Fork 5.4k
fix: SonarCloud for forks #27700
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: SonarCloud for forks #27700
Conversation
|
CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes. |
Builds ready [ef659fa]
Page Load Metrics (1921 ± 68 ms)
Bundle size diffs
|
Builds ready [422b95e]
Page Load Metrics (1928 ± 161 ms)
Bundle size diffs
|
|
Passing CI run targeting this branch: #27713 |
This comment was marked as resolved.
This comment was marked as resolved.
|
If I understand correctly how workflow_run works, it is expected that SonarCloud does not run for this PR.
|
Builds ready [56d1c5a]
Page Load Metrics (1809 ± 73 ms)
Bundle size diffs
|
Builds ready [ccc72b0]
Page Load Metrics (1797 ± 94 ms)
Bundle size diffs
|
|
Oh whoops, this has to be manually force merged by an admin, because it's failing SonarCloud -- chicken and egg |
NicholasEllul
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we add a notice comment somewhere in this action along the lines of
This GitHub action will checkout and scan third party code. Please ensure that any changes to this action do not perform actions that may result in code from that branch being executed such as installing dependencies or running build scripts.
This will ensure that in the future we don't unintentionally introduce behaviour that may result in third party code being executed in the context of this workflow.
3ca355e
e6b7619
Gudahtt
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
Co-authored-by: Mark Stacey <markjstacey@gmail.com>
Builds ready [6fed39b]
Page Load Metrics (1859 ± 204 ms)
Bundle size diffs
|
| name: Run tests | ||
| uses: ./.github/workflows/run-tests.yml | ||
|
|
||
| sonarcloud: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @HowardBraham, why it was removed from the main workflow? we do want to analyze develop branch
Description
This PR fixes SonarCloud for forks.
Related issues
Fixes: #27135
Manual testing steps
Screenshots/Recordings
Not applicable
Pre-merge author checklist
Pre-merge reviewer checklist