fix(sonar): point at this repo's own SonarCloud project (#20) #50
scorecard.yml
on: push
scorecard
/
Run Scorecard
23s
Annotations
2 warnings
|
scorecard / Run Scorecard
Running this GitHub Action without SONAR_TOKEN is not recommended\nERROR Not authorized or project not found. Please check the 'SONAR_TOKEN' environment\n variable, the 'sonar.projectKey' and 'sonar.organization' properties, ...\n```\n\nBecause auth fails first, nothing is currently being submitted anywhere\n— the wrong key is latent, not actively corrupting data. **But the\nmoment `SONAR_TOKEN` is added, this repo would start pushing its\nanalysis into `hyperpolymath_rsr-template-repo`, commingling with every\nother repo carrying the same copied key.** Fixing the key first avoids\npolluting that project.\n\n## Verified\n\n- The target project **exists** on SonarCloud (checked via the public\nAPI).\n- `hyperpolymath_rsr-template-repo` also exists — display name `-REPO-`\n— which is why the misdirected scans would land somewhere real rather\nthan erroring out.\n- `sonar.organization` is unchanged and was already correct.\n\nFound during an estate-wide sweep of `sonar-project.properties` files;\nseveral other repos carry the same copied key and need the same one-line\nfix.\n\n## Test plan\n- [x] Only `sonar.projectKey` and the project URL in the header comment\nchange\n- [x] Target project confirmed to exist on SonarCloud\n- [ ] Maintainer to add the `SONAR_TOKEN` repository secret — the\nworkflow cannot pass without it regardless of this change\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
|
|
scorecard / Run Scorecard
Running this GitHub Action without SONAR_TOKEN is not recommended\nERROR Not authorized or project not found. Please check the 'SONAR_TOKEN' environment\n variable, the 'sonar.projectKey' and 'sonar.organization' properties, ...\n```\n\nBecause auth fails first, nothing is currently being submitted anywhere\n— the wrong key is latent, not actively corrupting data. **But the\nmoment `SONAR_TOKEN` is added, this repo would start pushing its\nanalysis into `hyperpolymath_rsr-template-repo`, commingling with every\nother repo carrying the same copied key.** Fixing the key first avoids\npolluting that project.\n\n## Verified\n\n- The target project **exists** on SonarCloud (checked via the public\nAPI).\n- `hyperpolymath_rsr-template-repo` also exists — display name `-REPO-`\n— which is why the misdirected scans would land somewhere real rather\nthan erroring out.\n- `sonar.organization` is unchanged and was already correct.\n\nFound during an estate-wide sweep of `sonar-project.properties` files;\nseveral other repos carry the same copied key and need the same one-line\nfix.\n\n## Test plan\n- [x] Only `sonar.projectKey` and the project URL in the header comment\nchange\n- [x] Target project confirmed to exist on SonarCloud\n- [ ] Maintainer to add the `SONAR_TOKEN` repository secret — the\nworkflow cannot pass without it regardless of this change\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
scorecard-results
|
2.52 KB |
sha256:b0fc112afd28bbc58a4252f29ff736a59a99306e969e944ff9d556127401ea2c
|
|