[
https://issues.apache.org/jira/browse/NUTCH-3186?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18097459#comment-18097459
]
Hudson commented on NUTCH-3186:
-------------------------------
SUCCESS: Integrated in Jenkins build Nutch ยป Nutch-trunk #251 (See
[https://ci-builds.apache.org/job/Nutch/job/Nutch-trunk/251/])
NUTCH-3186 Split SonarQube workflow in unprivileged build and privileged
analysis part (#940) (github:
[https://github.com/apache/nutch/commit/ee2a286d1d63e66ae5e9fee6aa05b13544eb823e])
* (edit) .github/workflows/master-build.yml
* (edit) .github/workflows/sonarcloud.yml
> Split SonarQube workflow in unprivileged build and privileged analysis part
> ---------------------------------------------------------------------------
>
> Key: NUTCH-3186
> URL: https://issues.apache.org/jira/browse/NUTCH-3186
> Project: Nutch
> Issue Type: Bug
> Components: build
> Affects Versions: 1.23
> Reporter: Sebastian Nagel
> Assignee: Sebastian Nagel
> Priority: Critical
> Fix For: 1.23
>
>
> The SonarQube workflow defined by {{.github/workflows/sonarcloud.yml}} is run
> in a single workflow which has access to repository secrets. By splitting the
> workflow in an unprivileged build and privileged part which performs the
> analysis and sets the SonarQube status will secure the workflow secrets.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
