Pre-processing failed. Exit code: 1

I ma getting this errors

14:02:51.849  Server Url: [https://sonarcloud.io](https://sonarcloud.io/)
14:02:51.849  Api Url: [https://api.sonarcloud.io](https://api.sonarcloud.io/)
14:02:51.849  Is SonarCloud: True
14:02:51.852  No truststore provided; attempting to use the default location.
14:02:51.853  No truststore found at the default location; proceeding without a truststore.
14:02:51.856  sonar.verbose=True was specified - setting the log verbosity to 'Debug'
14:02:51.858  Updating build integration targets...
14:02:51.862  The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\4.0\Microsoft.Common.targets\ImportBefore
14:02:51.862  The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\10.0\Microsoft.Common.targets\ImportBefore
14:02:51.862  The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\11.0\Microsoft.Common.targets\ImportBefore
14:02:51.862  The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\12.0\Microsoft.Common.targets\ImportBefore
14:02:51.863  The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\14.0\Microsoft.Common.targets\ImportBefore
14:02:51.863  The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\15.0\Microsoft.Common.targets\ImportBefore
14:02:51.863  The file SonarQube.Integration.ImportBefore.targets is up to date at C:\Users\ofernandez\AppData\Local\Microsoft\MSBuild\Current\Microsoft.Common.targets\ImportBefore
14:02:51.876  Installed SonarQube.Integration.targets to C:\temp\9d9e9ea6-23e7-5bb8-baa0-421a1e7d2b86\1776348394622\build\.sonarqube\bin\targets
14:02:51.877  Creating config and output folders...
14:02:51.877  Creating directory: C:\temp\9d9e9ea6-23e7-5bb8-baa0-421a1e7d2b86\1776348394622\build\.sonarqube\conf
14:02:51.877  Creating directory: C:\temp\9d9e9ea6-23e7-5bb8-baa0-421a1e7d2b86\1776348394622\build\.sonarqube\out
14:02:51.889  Downloading from [https://sonarcloud.io/api/settings/values?component=unknown](https://sonarcloud.io/api/settings/values?component=unknown)...
14:02:52.824  Response received from [https://sonarcloud.io/api/settings/values?component=unknown](https://sonarcloud.io/api/settings/values?component=unknown)...
14:02:52.825  WARNING: Authentication with the server has failed.
14:02:52.825  WARNING: In version 7 of the scanner, the default value for the sonar.host.url changed from "[http://localhost:9000](http://localhost:9000/)" to "[https://sonarcloud.io](https://sonarcloud.io/)".
If the intention was to connect to the local SonarQube instance, please add the parameter: /d:sonar.host.url="[http://localhost:9000](http://localhost:9000/)"
14:02:52.827  Pre-processing failed. Exit code: 1

Hi,

To be clear, you’re trying to analyze with SonarQube Cloud?

Could you add -Dsonar.verbose=true to your analysis command and post the resulting log, redacted as necessary?

 
Thx,
Ann

Not the original poster, but we’re experiencing the same problem. It’s an intermittent failure at ~30-40% of the time.

We’ve replaced all our API keys, and have confirmed each one works.

This is the output from our build (GitHub hosted runner) with the verbose flag set:

SonarScanner for .NET 11.2.1

Using the .NET Core version of the Scanner for .NET

Default properties file was found at /home/runner/work/xxxx/xxxx/src/xxxx/.sonar/scanner/.store/dotnet-sonarscanner/11.2.1/dotnet-sonarscanner/11.2.1/tools/netcoreapp3.1/any/SonarQube.Analysis.xml

Loading analysis properties from /home/runner/work/xxxx/xxxx/src/xxxx/.sonar/scanner/.store/dotnet-sonarscanner/11.2.1/dotnet-sonarscanner/11.2.1/tools/netcoreapp3.1/any/SonarQube.Analysis.xml

sonar.verbose=True was specified - setting the log verbosity to 'Debug'

Pre-processing started.

Preparing working directories...

Using environment variables to determine the download directory...

12:00:14.222  Loading analysis properties from /home/runner/work/xxxx/xxxx/src/xxxx/.sonar/scanner/.store/dotnet-sonarscanner/11.2.1/dotnet-sonarscanner/11.2.1/tools/netcoreapp3.1/any/SonarQube.Analysis.xml

12:00:14.231  Server Url: https://sonarcloud.io

12:00:14.231  Api Url: https://api.sonarcloud.io

12:00:14.231  Is SonarCloud: True

12:00:14.234  No truststore provided; attempting to use the default location.

12:00:14.235  No truststore found at the default location; proceeding without a truststore.

12:00:14.237  sonar.verbose=True was specified - setting the log verbosity to 'Debug'

12:00:14.239  Updating build integration targets...

12:00:14.242  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/4.0/Microsoft.Common.targets/ImportBefore

12:00:14.243  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/10.0/Microsoft.Common.targets/ImportBefore

12:00:14.243  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/11.0/Microsoft.Common.targets/ImportBefore

12:00:14.243  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/12.0/Microsoft.Common.targets/ImportBefore

12:00:14.243  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/14.0/Microsoft.Common.targets/ImportBefore

12:00:14.243  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/15.0/Microsoft.Common.targets/ImportBefore

12:00:14.244  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/.local/share/Microsoft/MSBuild/Current/Microsoft.Common.targets/ImportBefore

12:00:14.244  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/Microsoft/MSBuild/15.0/Microsoft.Common.targets/ImportBefore

12:00:14.244  Installed SonarQube.Integration.ImportBefore.targets to /home/runner/Microsoft/MSBuild/Current/Microsoft.Common.targets/ImportBefore

12:00:14.245  Installed SonarQube.Integration.targets to /home/runner/work/xxxx/xxxx/src/xxxx/.sonarqube/bin/targets

12:00:14.246  Creating config and output folders...

12:00:14.246  Creating directory: /home/runner/work/xxxx/xxxx/src/xxxx/.sonarqube/conf

12:00:14.246  Creating directory: /home/runner/work/xxxx/xxxx/src/xxxx/.sonarqube/out

12:00:14.260  Downloading from https://sonarcloud.io/api/settings/values?component=unknown...

12:00:14.779  Response received from https://sonarcloud.io/api/settings/values?component=unknown...

12:00:14.780  WARNING: Authentication with the server has failed.

12:00:14.780  WARNING: In version 7 of the scanner, the default value for the sonar.host.url changed from "http://localhost:9000" to "https://sonarcloud.io".

If the intention was to connect to the local SonarQube instance, please add the parameter: /d:sonar.host.url="http://localhost:9000"

12:00:14.781  Pre-processing failed. Exit code: 1

Hi @daniel-gray,

Welcome to the community and thanks for this report!

I’ll ask the same of you: can you give me a verbose log?

 
Thx,
Ann

That is the verbose log I’m afraid. Not a lot of detail in there.

Hi,

Well… shoot.

Okay, can you provide your Org and Project IDs?

 
Thx,
Ann

Of course. org id is puregym-pico, project ID for the above is puregym-pico_urldiscovery

Hi,

Thanks! We have an ongoing incident that I think may be related. I’ll come back to you on that when I know more.

 
Thx,
Ann

Hello @daniel-gray,

We’ve tracked down the cause of this: over-aggressive blocking of GHActions runner IPs based on reputation. (I.e. bad actors used GHActions for attacks and now those IPs are ‘tainted’.)

We’ve mitigated this on the binaries.sonarsource.com side and are about to do the same on the SonarQube Cloud side. This should be fixed in ~45min.

Thanks for your patience.

ALM used

GitHub

CI system used

GitHub Actions

Scanner command used when applicable

The workflow uses the Sonar GitHub Action:

- name: SonarQube Scan
  uses: sonarsource/sonarqube-scan-action@v8
  env:
    SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

The action installs and runs:

/opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64/bin/sonar-scanner -Dsonar.projectBaseDir=.

Private details have been masked.

Languages of the repository

TypeScript

SonarCloud project URL

Not included here unless needed (private)

Error observed

We are seeing intermittent HTTP 403 failures from sonarsource/sonarqube-scan-action@v8.

The important detail is that rerunning the failed GitHub Actions job with zero code, workflow, or token changes succeeds. The same SONAR_TOKEN works on retry.

Failure 1: 403 while querying JRE metadata

Run sonarsource/sonarqube-scan-action@v8
Installing Sonar Scanner CLI 8.1.0.6389 for linux-x64...
Downloading from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip
Downloading signature from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip.asc
Importing SonarSource public key from hkps://keyserver.ubuntu.com...
/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1780592561889-2655 --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A
gpg: keybox '/home/runner/work/_temp/gpg-home-1780592561889-2655/pubring.kbx' created
gpg: /home/runner/work/_temp/gpg-home-1780592561889-2655/trustdb.gpg: trustdb created
gpg: key 1DB198F93525EC1A: public key "SonarSource S.A. <infra@sonarsource.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
Successfully imported key from hkps://keyserver.ubuntu.com
✓ SonarSource public key imported successfully
Verifying GPG signature...
/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1780592561889-2655 --batch --verify /home/runner/work/_temp/4da8b194-1c9a-4bde-93bd-34740df40b0c /home/runner/work/_temp/14416c65-031c-45f3-935a-3052d958b8b1
gpg: Signature made Tue Apr 21 07:20:26 2026 UTC
gpg:                using RSA key D1436C0DBACEA48702AF97C363F1DD7753B8B315
gpg: Good signature from "SonarSource S.A. <infra@sonarsource.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 679F 1EE9 2B19 609D E816  FDE8 1DB1 98F9 3525 EC1A
     Subkey fingerprint: D143 6C0D BACE A487 02AF  97C3 63F1 DD77 53B8 B315
✓ GPG signature verification passed
/usr/bin/unzip -o -q /home/runner/work/_temp/14416c65-031c-45f3-935a-3052d958b8b1
Sonar Scanner CLI cached to: /opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64
/opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64/bin/sonar-scanner -Dsonar.projectBaseDir=.
17:02:44.689 INFO  Scanner configuration file: /opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64/conf/sonar-scanner.properties
17:02:44.692 INFO  Project root configuration file: /home/runner/work/<repo>/<repo>/sonar-project.properties
17:02:44.708 INFO  SonarScanner CLI 8.1.0.6389
17:02:44.713 INFO  Linux 6.17.0-1015-azure amd64
17:02:48.657 INFO  Communicating with SonarQube Cloud
17:02:48.658 INFO  JRE provisioning: os[linux], arch[x86_64]
17:02:49.015 ERROR Failed to query JRE metadata: GET https://api.sonarcloud.io/analysis/jres?os=linux&arch=x86_64 failed with HTTP 403 Forbidden. Please check the property sonar.token or the environment variable SONAR_TOKEN.
17:02:49.016 INFO  EXECUTION FAILURE
17:02:49.017 INFO  Total time: 4.330s
Error: Action failed: The process '/opt/hostedtoolcache/sonar-scanner-cli/8.1.0.6389/linux-x64/bin/sonar-scanner' failed with exit code 1

Failure 2: 403 while downloading the scanner CLI

On a different run, the failure happened earlier while downloading the scanner CLI:

Run sonarsource/sonarqube-scan-action@v8
Installing Sonar Scanner CLI 8.1.0.6389 for linux-x64...
Downloading from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip
Error: Action failed: Unexpected HTTP response: 403

Steps to reproduce

I do not yet have deterministic reproduction steps. The issue appears intermittent and has occurred multiple times over at least the last few days.

Observed behavior:

  1. GitHub Actions job runs sonarsource/sonarqube-scan-action@v8.

  2. The action intermittently fails with HTTP 403.

  3. The failure has occurred in at least two different places:

    • downloading sonar-scanner-cli-8.1.0.6389-linux-x64.zip from binaries.sonarsource.com

    • querying JRE metadata from https://api.sonarcloud.io/analysis/jres?os=linux&arch=x86_64

  4. Rerunning the same failed job, with no changes to code, workflow, secrets, or token, succeeds.

Because the same token works when rerun, this does not appear to be a permanently invalid token or permissions issue.

Hi all,

This error, related to reputation-based blocking of some GitHub Actions IPs, has been fixed.

Thanks for your patience.

 
Ann