actions-marketplace-validations/Sonar Scan

SonarQube Scanner with Heap Memory Options:Detect bugs, vulnerabilities and code smells in more than 25 programming languages

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Jan 6, 2021
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: actions-marketplace-validations/sijomc_sonarscan-action@6241d251a5f4001d0061c2d25e05e5dae9373a54 # no releases — HEAD as of 2026-07-10

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
hostSonarQube server URLyes
projectKeyThe project's unique key. Allowed characters are: letters, numbers, -, _, . and :, with at least one non-digit.no""
projectNameName of the project that will be displayed on the web interface.no""
projectVersionThe project version.no""
projectBaseDirSet the sonar.projectBaseDir analysis propertyno.
exclusionsExclude directories from scanningno
loginLogin or authentication token of a SonarQube useryes
passwordPassword that goes with the sonar.login username. This should be left blank if an authentication token is being used.no
scannerOptionsSonar Scanner options for memory optimizationno

no outputs