[
https://issues.apache.org/jira/browse/NUTCH-3186?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18097457#comment-18097457
]
ASF GitHub Bot commented on NUTCH-3186:
---------------------------------------
lewismc commented on PR #940:
URL: https://github.com/apache/nutch/pull/940#issuecomment-5017157179
Nice @sebastian-nagel
> Split SonarQube workflow in unprivileged build and privileged analysis part
> ---------------------------------------------------------------------------
>
> Key: NUTCH-3186
> URL: https://issues.apache.org/jira/browse/NUTCH-3186
> Project: Nutch
> Issue Type: Bug
> Components: build
> Affects Versions: 1.23
> Reporter: Sebastian Nagel
> Assignee: Sebastian Nagel
> Priority: Critical
> Fix For: 1.23
>
>
> The SonarQube workflow defined by {{.github/workflows/sonarcloud.yml}} is run
> in a single workflow which has access to repository secrets. By splitting the
> workflow in an unprivileged build and privileged part which performs the
> analysis and sets the SonarQube status will secure the workflow secrets.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
