Merge pull request #39 from 0xPolygon/security-sonarcloud

Update Sonarcloud
0xPolygon · Dec 6, 2023 · 8f4596d · 8f4596d
2 parents 5399f88 + b565429
commit 8f4596d
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 23 deletions.
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
@@ -0,0 +1,21 @@
+name: SonarQube analysis
+
+on:
+  push:
+    branches:
+      - develop
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  sonarcloud:
+    name: SonarCloud
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
+      - name: SonarCloud Scan
+        uses: SonarSource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
diff --git a/sonar-project.properties b/sonar-project.properties
@@ -1 +1,2 @@
-sonar.projectKey=zkevm-node
+sonar.projectKey=0xPolygon_cdk-validium-node
+sonar.organization=0xpolygon