-
Notifications
You must be signed in to change notification settings - Fork 11
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ci: Adding security scan #36
Conversation
8b33a20
to
a8debbe
Compare
Kudos, SonarCloud Quality Gate passed! |
@@ -12,6 +12,10 @@ | |||
|
|||
- Disallowed setting of `threads` in `profiles.yml` to a value greater than 1. | |||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is not going to merge correctly. 0.21.8 has already been released, so it should be 0.21.9. However, 0.21.8 has been yanked temporarily due to an installation issue. I think this PR needs to be on hold until a fixed version of 0.21.8 is released.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok, this confirms no security issues are present at the moment so we can hold off merging until everything's fixed in main.
Resolves # FIR-10119
Description
Adding security scan action to automatically spot any security hotspots via Sonar Cloud and Fossa.
Checklist
CHANGELOG.md
and added information about my change.