From e5f2f39ab9a833dfd475a3e36613215d5f49022d Mon Sep 17 00:00:00 2001 From: LucaCappelletti94 Date: Sun, 25 Oct 2026 22:00:10 +0100 Subject: [PATCH] Remove SonarCloud integration --- .github/workflows/sonar.yml | 42 ------------------------------------- 1 file changed, 42 deletions(-) delete mode 100644 .github/workflows/sonar.yml diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml deleted file mode 100644 index 617d56bfd..000000000 --- a/.github/workflows/sonar.yml +++ /dev/null @@ -1,42 +0,0 @@ -name: SonarQube - -on: - push: - branches: [main] - pull_request: - types: [opened, synchronize, reopened] - -permissions: - contents: read - -concurrency: - group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }} - cancel-in-progress: ${{ github.ref != 'refs/heads/main' }} - -jobs: - sonarqube: - name: SonarQube scan - runs-on: ubuntu-26.04 - timeout-minutes: 20 - # Neither a fork's pull request nor a Dependabot run can read SONAR_TOKEN, - # so the scan runs for same-repo human branches and pushes to main only. - if: >- - github.event_name == 'push' || - (github.event.pull_request.head.repo.full_name == github.repository && - github.event.pull_request.user.login != 'dependabot[bot]') - steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - with: - # Full history: new-code detection and blame need more than a - # shallow clone. - fetch-depth: 0 - - uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8 - env: - SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} - with: - # The validity corpus is a list of SQL literals, which duplicate - # detection reads as repeated code. - args: > - -Dsonar.organization=lucacappelletti94-github - -Dsonar.projectKey=LucaCappelletti94_pg2sqlite - -Dsonar.cpd.exclusions=tests/helpers/emitted_corpus.rs