14:02:51.849 Server Url: [https://sonarcloud.io](https://sonarcloud.io/)
14:02:51.849 Api Url: [https://api.sonarcloud.io](https://api.sonarcloud.io/)
14:02:51.849 Is SonarCloud: True
14:02:51.852 No truststore provided; attempting to use the default location.
14:02:51.853 No truststore found at the default location; proceeding without a truststore.
14:02:51.856 sonar.verbose=True was specified - setting the log verbosity to 'Debug'
14:02:51.858 Updating build integration targets...
14:02:51.862 The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\4.0\Microsoft.Common.targets\ImportBefore
14:02:51.862 The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\10.0\Microsoft.Common.targets\ImportBefore
14:02:51.862 The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\11.0\Microsoft.Common.targets\ImportBefore
14:02:51.862 The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\12.0\Microsoft.Common.targets\ImportBefore
14:02:51.863 The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\14.0\Microsoft.Common.targets\ImportBefore
14:02:51.863 The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\15.0\Microsoft.Common.targets\ImportBefore
14:02:51.863 The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\Current\Microsoft.Common.targets\ImportBefore
14:02:51.876 Installed SonarQube.Integration.targets to C:\temp\9d9e9ea6-23e7-5bb8-baa0-421a1e7d2b86\1776348394622\build\.sonarqube\bin\targets
14:02:51.877 Creating config and output folders...
14:02:51.877 Creating directory: C:\temp\9d9e9ea6-23e7-5bb8-baa0-421a1e7d2b86\1776348394622\build\.sonarqube\conf
14:02:51.877 Creating directory: C:\temp\9d9e9ea6-23e7-5bb8-baa0-421a1e7d2b86\1776348394622\build\.sonarqube\out
14:02:51.889 Downloading from [https://sonarcloud.io/api/settings/values?component=unknown](https://sonarcloud.io/api/settings/values?component=unknown)...
14:02:52.824 Response received from [https://sonarcloud.io/api/settings/values?component=unknown](https://sonarcloud.io/api/settings/values?component=unknown)...
14:02:52.825 WARNING: Authentication with the server has failed.
14:02:52.825 WARNING: In version 7 of the scanner, the default value for the sonar.host.url changed from "[http://localhost:9000](http://localhost:9000/)" to "[https://sonarcloud.io](https://sonarcloud.io/)".
If the intention was to connect to the local SonarQube instance, please add the parameter: /d:sonar.host.url="[http://localhost:9000](http://localhost:9000/)"
14:02:52.827 Pre-processing failed. Exit code: 1
Not the original poster, but we’re experiencing the same problem. It’s an intermittent failure at ~30-40% of the time.
We’ve replaced all our API keys, and have confirmed each one works.
This is the output from our build (GitHub hosted runner) with the verbose flag set:
SonarScanner for .NET 11.2.1
Using the .NET Core version of the Scanner for .NET
Default properties file was found at /home/runner/work/xxxx/xxxx/src/xxxx/.sonar/scanner/.store/dotnet-sonarscanner/11.2.1/dotnet-sonarscanner/11.2.1/tools/netcoreapp3.1/any/SonarQube.Analysis.xml
Loading analysis properties from /home/runner/work/xxxx/xxxx/src/xxxx/.sonar/scanner/.store/dotnet-sonarscanner/11.2.1/dotnet-sonarscanner/11.2.1/tools/netcoreapp3.1/any/SonarQube.Analysis.xml
sonar.verbose=True was specified - setting the log verbosity to 'Debug'
Pre-processing started.
Preparing working directories...
Using environment variables to determine the download directory...
12:00:14.222 Loading analysis properties from /home/runner/work/xxxx/xxxx/src/xxxx/.sonar/scanner/.store/dotnet-sonarscanner/11.2.1/dotnet-sonarscanner/11.2.1/tools/netcoreapp3.1/any/SonarQube.Analysis.xml
12:00:14.231 Server Url: https://sonarcloud.io
12:00:14.231 Api Url: https://api.sonarcloud.io
12:00:14.231 Is SonarCloud: True
12:00:14.234 No truststore provided; attempting to use the default location.
12:00:14.235 No truststore found at the default location; proceeding without a truststore.
12:00:14.237 sonar.verbose=True was specified - setting the log verbosity to 'Debug'
12:00:14.239 Updating build integration targets...
12:00:14.242 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/4.0/Microsoft.Common.targets/ImportBefore
12:00:14.243 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/10.0/Microsoft.Common.targets/ImportBefore
12:00:14.243 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/11.0/Microsoft.Common.targets/ImportBefore
12:00:14.243 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/12.0/Microsoft.Common.targets/ImportBefore
12:00:14.243 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/14.0/Microsoft.Common.targets/ImportBefore
12:00:14.243 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/15.0/Microsoft.Common.targets/ImportBefore
12:00:14.244 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/Current/Microsoft.Common.targets/ImportBefore
12:00:14.244 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/Microsoft/MSBuild/15.0/Microsoft.Common.targets/ImportBefore
12:00:14.244 Installed SonarQube.Integration.ImportBefore.targets to /home/runner/Microsoft/MSBuild/Current/Microsoft.Common.targets/ImportBefore
12:00:14.245 Installed SonarQube.Integration.targets to /home/runner/work/xxxx/xxxx/src/xxxx/.sonarqube/bin/targets
12:00:14.246 Creating config and output folders...
12:00:14.246 Creating directory: /home/runner/work/xxxx/xxxx/src/xxxx/.sonarqube/conf
12:00:14.246 Creating directory: /home/runner/work/xxxx/xxxx/src/xxxx/.sonarqube/out
12:00:14.260 Downloading from https://sonarcloud.io/api/settings/values?component=unknown...
12:00:14.779 Response received from https://sonarcloud.io/api/settings/values?component=unknown...
12:00:14.780 WARNING: Authentication with the server has failed.
12:00:14.780 WARNING: In version 7 of the scanner, the default value for the sonar.host.url changed from "http://localhost:9000" to "https://sonarcloud.io".
If the intention was to connect to the local SonarQube instance, please add the parameter: /d:sonar.host.url="http://localhost:9000"
12:00:14.781 Pre-processing failed. Exit code: 1
We’ve tracked down the cause of this: over-aggressive blocking of GHActions runner IPs based on reputation. (I.e. bad actors used GHActions for attacks and now those IPs are ‘tainted’.)
We’ve mitigated this on the binaries.sonarsource.com side and are about to do the same on the SonarQube Cloud side. This should be fixed in ~45min.
We are seeing intermittent HTTP 403 failures from sonarsource/sonarqube-scan-action@v8.
The important detail is that rerunning the failed GitHub Actions job with zero code, workflow, or token changes succeeds. The same SONAR_TOKEN works on retry.
Failure 1: 403 while querying JRE metadata
Run sonarsource/sonarqube-scan-action@v8
Installing Sonar Scanner CLI 8.1.0.6389 for linux-x64...
Downloading from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip
Downloading signature from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip.asc
Importing SonarSource public key from hkps://keyserver.ubuntu.com...
/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1780592561889-2655 --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A
gpg: keybox '/home/runner/work/_temp/gpg-home-1780592561889-2655/pubring.kbx' created
gpg: /home/runner/work/_temp/gpg-home-1780592561889-2655/trustdb.gpg: trustdb created
gpg: key 1DB198F93525EC1A: public key "SonarSource S.A. <infra@sonarsource.com>" imported
gpg: Total number processed: 1
gpg: imported: 1
Successfully imported key from hkps://keyserver.ubuntu.com
✓ SonarSource public key imported successfully
Verifying GPG signature...
/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1780592561889-2655 --batch --verify /home/runner/work/_temp/4da8b194-1c9a-4bde-93bd-34740df40b0c /home/runner/work/_temp/14416c65-031c-45f3-935a-3052d958b8b1
gpg: Signature made Tue Apr 21 07:20:26 2026 UTC
gpg: using RSA key D1436C0DBACEA48702AF97C363F1DD7753B8B315
gpg: Good signature from "SonarSource S.A. <infra@sonarsource.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 679F 1EE9 2B19 609D E816 FDE8 1DB1 98F9 3525 EC1A
Subkey fingerprint: D143 6C0D BACE A487 02AF 97C3 63F1 DD77 53B8 B315
✓ GPG signature verification passed
/usr/bin/unzip -o -q /home/runner/work/_temp/14416c65-031c-45f3-935a-3052d958b8b1
Sonar Scanner CLI cached to: /opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64
/opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64/bin/sonar-scanner -Dsonar.projectBaseDir=.
17:02:44.689 INFO Scanner configuration file: /opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64/conf/sonar-scanner.properties
17:02:44.692 INFO Project root configuration file: /home/runner/work/<repo>/<repo>/sonar-project.properties
17:02:44.708 INFO SonarScanner CLI 8.1.0.6389
17:02:44.713 INFO Linux 6.17.0-1015-azure amd64
17:02:48.657 INFO Communicating with SonarQube Cloud
17:02:48.658 INFO JRE provisioning: os[linux], arch[x86_64]
17:02:49.015 ERROR Failed to query JRE metadata: GET https://api.sonarcloud.io/analysis/jres?os=linux&arch=x86_64 failed with HTTP 403 Forbidden. Please check the property sonar.token or the environment variable SONAR_TOKEN.
17:02:49.016 INFO EXECUTION FAILURE
17:02:49.017 INFO Total time: 4.330s
Error: Action failed: The process '/opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64/bin/sonar-scanner' failed with exit code 1
Failure 2: 403 while downloading the scanner CLI
On a different run, the failure happened earlier while downloading the scanner CLI:
Run sonarsource/sonarqube-scan-action@v8
Installing Sonar Scanner CLI 8.1.0.6389 for linux-x64...
Downloading from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip
Error: Action failed: Unexpected HTTP response: 403
Steps to reproduce
I do not yet have deterministic reproduction steps. The issue appears intermittent and has occurred multiple times over at least the last few days.