cloudbees-io/sonarqube-bundled
Build and scan repository
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 6, 2026
- License
- MIT
Pinned Snippet
uses: cloudbees-io/sonarqube-bundled-sast-scan-code@88a1cf2aa8c4856d90548e0d4895c2c53803ff99 # v2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| language | Programming Language | yes | — |
| log-level | Log level | no | INFO |
| cover-file-name | Coverage file path | no | "" |
| sonar-inclusion | SonarQube Inclusion | no | "" |
| sonar-exclusion | SonarQube Exclusion | no | "" |
| threshold-critical | The maximum number of Critical severity security findings, if exceeded, the build will fail | no | 999 |
| threshold-very-high | The maximum number of Very High severity security findings, if exceeded, the build will fail | no | 999 |
| threshold-high | The maximum number of High severity security findings, if exceeded, the build will fail | no | 999 |
| threshold-medium | The maximum number of Medium severity security findings, if exceeded, the build will fail | no | 999 |
| threshold-low | The maximum number of Low severity security findings, if exceeded, the build will fail | no | 999 |
| assert-url | Assert URL | no | ${{ cloudbees.scm.repositoryUrl }} |
| assert-branch | Assert Branch | no | ${{ cloudbees.scm.branch }} |
Outputs
| name | description |
|---|---|
| critical-count | A string containing the number of Critical security findings discovered during the scan. |
| very-high-count | A string containing the number of Very High security findings discovered during the scan. |
| high-count | A string containing the number of High security findings discovered during the scan. |
| medium-count | A string containing the number of Medium security findings discovered during the scan. |
| low-count | A string containing the number of Low security findings discovered during the scan. |