GitHub Developer Velocity Bottleneck: SonarQube re-downloads all Go dependencies for EVERY PR update

SonarQube Cloud
,
1

Template for a good new topic, formatted with Markdown:

  • ALM used: GitHub
  • CI system used: GitHub Action
  • Scanner command used when applicable: N/A
  • Languages of the repository: Go
  • Only if the SonarCloud project is public, the URL: N/A (private)
  • Error observed: N/A, not an error but performance issue
  • Steps to reproduce: make a push to any PR written in Go, SonarQube will ALWAYS download all Go dependencies in EVERY run without any caching, causing a ~10 minutes wait for every code update
  • Potential workaround: none
2

Hey @yinsli-equinix

I’m not familiar with the scanner downloading a project’s Go dependencies.

Can you share what your GitHub Actions YAML looks like, and what you’re seeing in the logs?