This is an automated email from the ASF dual-hosted git repository.

swebb2066 pushed a commit to branch upgrade_sonarsource
in repository https://gitbox.apache.org/repos/asf/logging-log4cxx.git

commit 906d41926ce129afb25acd3f48345faebb57a503
Author: Stephen Webb <[email protected]>
AuthorDate: Wed Apr 1 13:08:44 2026 +1100

    Pin SonarSource action to a specific git hash
---
 .github/workflows/sonarcloud.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index 6ad44c1f..f4fa4d24 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -18,8 +18,8 @@ on:
   push:
     branches:
       - master
-#  pull_request:
-#    types: [opened, synchronize, reopened]
+  pull_request:
+    types: [opened, synchronize, reopened]
 
 jobs:
   build:
@@ -55,7 +55,7 @@ jobs:
           sudo apt-get install -y libapr1-dev libaprutil1-dev
 
       - name: Install Build Wrapper
-        uses: SonarSource/sonarqube-scan-action/[email protected]
+        uses: 
SonarSource/sonarqube-scan-action/install-build-wrapper@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9
 #v7.0.0
         env:
           SONAR_HOST_URL: ${{ env.SONAR_SERVER_URL }}
 
@@ -84,7 +84,7 @@ jobs:
             -o "$BaseDir/build/coverage.xml"
 
       - name: SonarQube Scan
-        uses: SonarSource/[email protected]
+        uses: 
SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 
#v7.0.0
         env:
           SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
           SONAR_HOST_URL: ${{ env.SONAR_SERVER_URL }}

Reply via email to