GitHub Actions setup confirmation

SonarQube Cloud
, ,
1

Hi guys

Please i need to confirm that I am doing the right thing

here is a screenshot below of my sonar settings in the project code files

image

Below is my build.yml file

on:
  # Trigger analysis when pushing in master or pull requests, and when creating
  # a pull request.
  push:
    branches:
      - master
      - release
  pull_request:
      types: [opened, synchronize, reopened]
name: SonarCloud
jobs:
  sonarcloud:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
      with:          
        args: >
          -Dsonar.inclusions=**/*.sln,**/*.csproj,**/*.cs,**/*.json,**/*.bat,**/*.html,**/*.css,**/*.js,**/*.kt,**/*.xml
          -Dsonar.exclusions="**/CAIMS.MobileApp,**/Migrations/*.cs,**/*.c,**/*.cc,**/*.cpp,**/*.h"
          -Dsonar.projectKey=xxxxxxxxx_xxxxx 
          -Dsonar.organization=xxxxxxxxx
          -Dsonar.c.file.suffixes=- -Dsonar.cpp.file.suffixes=- -Dsonar.objc.file.suffixes=-
        # Disabling shallow clone is recommended for improving relevancy of reporting
        fetch-depth: 0    
    - name: SonarCloud Scan
      uses: sonarsource/sonarcloud-github-action@master
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Yet I am getting the error below

image
image1130×1070 149 KB

Please help

2

This section belongs to the Sonar section. You are passing these to the checkout step.

on:
  # Trigger analysis when pushing in master or pull requests, and when creating
  # a pull request.
  push:
    branches:
      - master
      - release
  pull_request:
      types: [opened, synchronize, reopened]
name: SonarCloud
jobs:
  sonarcloud:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
        # Disabling shallow clone is recommended for improving relevancy of reporting
        fetch-depth: 0    
    - name: SonarCloud Scan
      uses: sonarsource/sonarcloud-github-action@master
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
      with:          
        args: >
          -Dsonar.inclusions=**/*.sln,**/*.csproj,**/*.cs,**/*.json,**/*.bat,**/*.html,**/*.css,**/*.js,**/*.kt,**/*.xml
          -Dsonar.exclusions="**/CAIMS.MobileApp,**/Migrations/*.cs,**/*.c,**/*.cc,**/*.cpp,**/*.h"
          -Dsonar.projectKey=xxxxxxxxx_xxxxx 
          -Dsonar.organization=xxxxxxxxx
          -Dsonar.c.file.suffixes=- -Dsonar.cpp.file.suffixes=- -Dsonar.objc.file.suffixes=-

See GitHub - SonarSource/sonarcloud-github-action: Integrate SonarCloud code analysis to GitHub Actions