I have attempted to modify a rule default values, but the warning keeps getting triggered even though it shouldn’t.
The specific rule is githubactions:S7637 … I have changed it from the default value of trustedPrefixes:./,actions/,github/ to trustedPrefixes:./,actions/,github/,LizardByte/
I have set the profile to the default and it applies to all projects.
But it seems that no matter what, it keeps flagging this.
Colin
(Colin)
October 13, 2025, 2:01pm
2
Hey there.
Thanks for the report. This was already reported here:
Hi @andyn-ff Thank you for your report and welcome to the community!
I created a ticket Jira and quickly fixed it. It will be available in SonarQube Cloud in few days, depends on when we release our analyzer.
In the meantime please change MyOrgName/ in trustedPrefixes to lowercase: myorgname/. The actions are case insensitive and the issue was in the way how we split trustedPrefixes (the String.lowecase() call was missing).
Best
Marcin
And a fix should be deployed on SonarQube Cloud relatively soon.
system
(system)
Closed
October 20, 2025, 2:01pm
3
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.