Configuring a secured GitHub workflow to launch a Sonar analysis for PR from forks

Another good news: I found the problem!
As in this topic, the SHA visible on SonarCloud was not the right one, so I had to specify the one from the PR.
I now have a check and a decoration on my PR from a fork :partying_face:

I’ll add a message tomorrow with the whole solution for future reference