Skip to content

Security review, chart release 1.9, .net sonar config - #27

Merged
devpro merged 5 commits into
mainfrom
feature/shellcheck-lint
Oct 29, 2026
Merged

devpro merged 5 commits into
mainfrom
feature/shellcheck-lint

Conversation

@devpro

@devpro devpro commented Oct 29, 2026

Copy link
Copy Markdown
Owner

No description provided.

devpro and others added 5 commits October 26, 2026 23:31
…he markup lint workflow

ShellCheck is pinned and its archive verified against a SHA256 kept in the workflow, since its releases publish no checksum file.
A script without the .sh extension is found by its shebang.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…at its analysis settings are versioned with its code

The scanner for .NET never reads a sonar-project.properties, and the begin step held no way to add a setting.
The new sonar-settings-file input reaches the scanner with /s:, and the Sonar test of the .NET fixture loads one, since a missing or invalid file stops the analysis.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…lves a relative one against its own .sonarqube folder

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… step talks to the remote with it

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
….9.0 from a checksummed release, which uploads the assets before publishing a release, as an immutable release refuses them afterwards

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@sonarqubecloud

Copy link
Copy Markdown

@sonarqubecloud

Copy link
Copy Markdown

@sonarqubecloud

Copy link
Copy Markdown

@devpro
devpro merged commit bf95c99 into main Oct 29, 2026
47 checks passed
@devpro
devpro deleted the feature/shellcheck-lint branch October 29, 2026 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant