We are using GitHub together with SonarCloud to check also pull requests. With the recent removal of the preview mode it is not possible to run checks on pull requests from forks. [ERROR] Failed to execute goal org.sonarsource.scanner.maven:sonar-maven-plugin:3.5.0.1254:sonar (default-cli) on pro…

Are there any news? The Issue https://jira.sonarsource.com/browse/MMF-1371 is not so active :slight_smile:

Bump, any news on that? Our setup in Jenkins is that we have people all over the world using forks to contribute to https://github.com/jenkinsci/ repositories, we’d love to use SonarCloud integration to get feedback on the PRs from external forks.

What will happen if I hard code the sonar token into the workflow yml file?

[image] eastfisher: What will happen if I hard code the sonar token into the workflow yml file? We cannot recommend adding secrets to version control. [image] warden: Bump, any news on that? Not yet! [image] derTobsch: Are there any news? The Issue https://jira.sonarsource.com/br…

Not yet! I recommend to check again after 4-6 months. how is it going :slight_smile:

We still don’t have an ETA, and it won’t happen before the end of the year. We do recognize this is a highly wanted feature, and I hope we’ll be able to squeeze it in our roadmap for next year. Feel free to ping us again after 3+ months.

As far as I know this topic did not become an explicit target on our roadmap for the year. That doesn’t mean it won’t happen, it just didn’t make it into the top. This is very important to us, and we’ll try to squeeze it in our monthly plannings. Feel free to ping us again after 4-6 months.

What do you think - what difference will be: anonymous (without token) analyses supported by sonar token in code for technical account which has only analyses permission

Any news on this. I also work on an OSS project where we all use forks. We don’t feel comfortable adding secrets into the repo, which means we can’t use sonarcloud for PR decoration. Whilst the sonar results are great, they are rarely looked at. To be effective we MUST have scans/changes being show…

How to use SonarCloud with a forked repository on GitHub?

SonarQube Cloud

Peeter_Piegaze (Peeter Piegaze) October 20, 2021, 11:52am 28

Unfortunately, I have no update from product management at this time.

Topic		Replies	Views
Configuring a secured GitHub workflow to launch a Sonar analysis for PR from forks SonarQube Cloud java , maven , scanner , github , coverage	12	313	April 18, 2026
SonarCloud analysis fails because only GITHUB_TOKEN is available in pull requests from forks SonarQube Cloud coverage , github-actions	5	138	September 25, 2025
secrets.SONAR_TOKEN not read when accessed from PR SonarQube Cloud maven , github-actions , sonarqube-cloud	8	1782	May 10, 2021
Analysis is running on the whole code base not only the changes in the PR SonarQube Server / Community Build coverage , sonarqube-cloud	11	953	June 23, 2023
Per PR decoration is not working SonarQube Cloud github-checks	7	2429	March 5, 2020

How to use SonarCloud with a forked repository on GitHub?

Related topics