SONAR_TOKEN permissions in pull request GitHub Actions

Hey.

Thanks for this.

I’m having a headache figuring out why I can only view Projects and Rules on your organization but not Quality Profiiles… I suspect it has something to do with not being a member of an organization… which begs the question why it’s possible to configure the Execute Analysis permission at all for Anyone (which is a distinct group from Members).

At the same time, I suspect it’s because we think it’s a bad idea for Anyone to be able to execute analysis (even if it would fix your current pain).

I’ll flag this for attention to see if there’s something we want to do about this, whether in behavior or making the behavior clearer.