Use commit hash with GHA

istvan-bodo-sonarsource · Aug 14, 2024 · 22be64c · 22be64c
1 parent c0aabb5
commit 22be64c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
@@ -14,7 +14,7 @@ jobs:
  with:
  fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
  - name: SonarCloud Scan
- uses: SonarSource/sonarqube-scan-action@master
+ uses: SonarSource/sonarqube-scan-action@2af7c4bea3abd8c236b5edb80998f31374896f09
  env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information
  SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # Generate a token on SonarQube, add it to the secrets of this repo with the name SONAR_TOKEN (Settings > Secrets > Actions > add new repository secret)