name: SonarQube on: push: branches: - '20[0-9][0-9].[0-9].x' pull_request: types: [opened, synchronize, reopened] jobs: sonarqube: name: SonarQube runs-on: ubuntu-22.04 steps: - uses: actions/checkout@v4 with: fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - name: SonarQube Scan uses: SonarSource/sonarqube-scan-action@v4 env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}