A deprecated GitHub Action for scanning code with SonarQube Cloud to detect quality and security issues.
SonarCloud GitHub Action is a CI/CD integration tool that scans code using SonarQube Cloud for static analysis. It detects coding issues, security vulnerabilities, and maintains code quality across over 30 programming languages and frameworks. The action is designed to run in GitHub workflows, providing automated feedback on pull requests and pushes.
Development teams using GitHub Actions for CI/CD who want to integrate automated code quality and security scanning into their pipelines. It's particularly useful for projects spanning multiple languages where consistent static analysis is needed.
Developers choose this action for its seamless integration with GitHub workflows, broad language support, and AI-powered fix recommendations. It provides a centralized way to enforce code quality standards and security checks directly in the development process.
Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports over 30 programming languages and frameworks, including Java, JavaScript, Python, and C/C++, as listed in the README, enabling comprehensive static analysis for polyglot codebases.
Integrates Sonar's AI CodeFix capability to provide actionable remediation suggestions, helping developers quickly address issues identified during scans.
Allows custom analysis via the `args` input, scanner version control with `scannerVersion`, and base directory specification, offering tailored setups for complex projects.
Supports overriding the scanner binaries URL with `scannerBinariesUrl`, enabling use in air-gapped or restricted internet environments, as detailed in the README.
The README explicitly warns that this action is deprecated and will be removed, forcing users to migrate to `sonarqube-scan-action`, which adds maintenance overhead and potential breakage.
For Java with Maven/Gradle, .NET, and C/C++ projects, the README recommends dedicated scanners, indicating this action may lack optimizations or features for these ecosystems.
Requires managing a `sonar-project.properties` file, SONAR_TOKEN secrets, and environment variables, which can be error-prone and time-consuming for simple or rapid integrations.