matrix-org/SonarCloud

Helper action to analyse repo with SonarCloud, pass correct PR details and upload coverage.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 9, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: matrix-org/sonarcloud-workflow-action@820f7c2e9e94ba9e35add0f739691e5c7e23fa25 # v4.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
is_prWhether this workflow run related to a PR, if true then `repository` must be specified.no
skip_coverage_labelA label to check the pull request for, if present will exclude all files from coverage. Only valid with is_pr=true.no
version_cmdThe shell command to find the version to pass to Sonar as projectVersionyes
repositoryThe full name of the head repo in org/repo formatyes
branchThe name of the head branchyes
revisionThe git revision with which this sonar run should be associatedyes
tokenThe SONAR_TOKEN passed from secrets.yes
coverage_run_idThe run_id of the workflow which upload the coverage relevant to this run, if anyno
coverage_artifact_nameThe name of the coverage artifactnocoverage
coverage_extract_pathThe path to which to extract the artifact, defaults to the checkout root `.`no.
skip_checkoutWhether to skip the checkout step, sometimes some setup- action needs to run between checkout & analysisnofalse

no outputs