Github PR decoration fails due to missing SONAR_TOKEN

[Rapster (Sébastien Lepage)]

Template Description

• ALM used: Github
• CI system used: Github Actions
• Scanner command used when applicable: mvn clean org.jacoco:jacoco-maven-plugin:prepare-agent install sonar:sonar -Pquick -Dsonar.organization=primefaces -Dsonar.host.url=https://sonarcloud.io -Dsonar.token=${{secrets.SONAR_TOKEN}} -fprimefaces/pom.xml
• Languages of the repository: Java
• Only if the SonarCloud project is public, the URL: SonarCloud
  • And if you need help with pull request decoration, then the URL to the PR too: Fix #12507 - DataTable: default input facet filter not working with dynamic columns by Rapster · Pull Request #12512 · primefaces/primefaces · GitHub
• Error observed: Fix #12507 - DataTable: default input facet filter not working with dynamic columns · primefaces/primefaces@ab14222 · GitHub

I’m trying to set up Pull Request decoration on our github repo, till recently where I want the sonar scanner to be executed on PR. For some reason it fails:

Error: Failed to execute goal org.sonarsource.scanner.maven:sonar-maven-plugin:4.0.0.4121:sonar (default-cli) on project primefaces: Project not found. Please check the 'sonar.projectKey' and 'sonar.organization' properties, the 'SONAR_TOKEN' environment variable, or contact the project administrator to check the permissions of the user the token belongs to

I’m admin on sonarcloud for this repo but commiters in github, yet I’m pretty sure SONAR_TOKEN is set (since it’s always been working). The build works on master, but not on PR branch.

Thanks for your help

[ganncamp (G Ann Campbell)]

Hi,

I see that you’re providing the organization as a command line parameter. Are you using the ‘natural’ project key from the pom? Because the error message covers more than just the token:

@Rapster

Project not found. Please check the ‘sonar.projectKey’ and ‘sonar.organization’ properties

Also, I see that you’re providing a token on the command line, but for GHActions, it may be that you need to provide the token as an envvar. Could that be the difference between your working full analysis and your non-working PR analysis?

[Rapster (Sébastien Lepage)]

Thanks for your answer, i’ll get back to it after this (since there might be an easy to achive this):

I received a notification https://tinyurl.com/mvkfdmzf, seems it’s possible from now on to execute PR analysis on external PRs, I followed the instructions:

For existing projects:

• Go to your project’s Administration > Analysis Method page and turn on Automatic Analysis.
• The Analysis Method page will display a compatibility check, so you are aware of our recommendations for your specific project.

But “Automatic Analysis” doesn’t show on sonarcloud, normal?

[ganncamp (G Ann Campbell)]

Hi,

We try to keep it to one topic per thread. Otherwise it can get messy, fast.

Please create a new thread for this new question.

 
Thx,
Ann