cloudbees-io/sonarqube-hybrid-plugin
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- MIT
Pinned Snippet
uses: cloudbees-io/sonarqube-plugin@cc7191f0eaa3087c4306ab3a60282d9f476d9fb0 # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| url | Server URL | yes | — |
| username | Sonarqube username | no | — |
| password | Sonarqube password | no | — |
| token | Sonarqube token | no | — |
| ref | Flag to indicate the ref that should be archived (same as supplied to checkout) | no | "" |
| workspace-dir | Flag to mention the path where the checked out code will be present | no | "" |
| cmakeList-path | CMakeLists.txt file path needed for running make command for CFamily scans | no | "" |
| sonar-inclusion | File patterns to include in the scan | no | "" |
| sonar-exclusion | File patterns to exclude from the scan | no | "" |
| cover-file-name | Coverage report file name | no | coverage.out |
Outputs
| name | description |
|---|---|
| critical-count | A string containing the number of Critical security findings discovered during the scan. |
| very-high-count | A string containing the number of Very High security findings discovered during the scan. |
| high-count | A string containing the number of High security findings discovered during the scan. |
| medium-count | A string containing the number of Medium security findings discovered during the scan. |
| low-count | A string containing the number of Low security findings discovered during the scan. |
| policy-subject | A json value containing the details about the vulnerability scan summary & details. |