ALM: Github
CI system: Github Actions
Scanner command used when applicable: this is my github actions build.yml
push:
branches:
- main
pull_request:
types:
[opened, synchronize, reopened]
- name: SonarQube Scan
uses: SonarSource/sonarqube-scan-action@v6
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
and for sonar settings:
- enable issue annotations: true
- enable summary content: true
- automatic anaysis: false
Languages:
across several languages + repositories + projects
Error observed/Steps to reproduce:
i see the github action to upload to sonarcube called in every PR and in the regular build. i see the PR triggered in sonar and the analysis runs normally. however, when sonar fails, it does not report back to github actions. furthermore, it does not comment on the PR. everything from sonar is always shown as successful in github.
the odd part is that this initially worked fine - we changed our github organization name a few weeks ago, and we updated the sonarcloud github integration, and it shows successful “connected” messages in settings - however, this failure reporting issue persists.
not sure what else to try - we may have to halt our subscription if this is not resolved and go with a different vendor for SCA, integration with github actions is a must