Test BUILD-10215: standardize GitHub Actions output logging#84
Test BUILD-10215: standardize GitHub Actions output logging#84
Conversation
There was a problem hiding this comment.
Pull request overview
This PR temporarily repoints the repository’s build workflow to a test branch of SonarSource/ci-github-actions in order to validate standardized GitHub Actions output logging (e.g., ::error / ::warning annotations) in the UI.
Changes:
- Update the
build-poetryaction reference toBUILD-10215-standardize-ghaction-output-logging. - Update the
promoteaction reference toBUILD-10215-standardize-ghaction-output-logging.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| steps: | ||
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | ||
| - uses: SonarSource/ci-github-actions/build-poetry@master # dogfood | ||
| - uses: SonarSource/ci-github-actions/build-poetry@BUILD-10215-standardize-ghaction-output-logging # dogfood |
There was a problem hiding this comment.
Using a mutable branch ref for an external action makes workflow runs non-reproducible and increases supply-chain risk (the referenced branch can move without any change in this repo). For testing, prefer pinning SonarSource/ci-github-actions to a specific commit SHA (or an immutable tag) and/or ensure this change is reverted before merging into the default branch.
| contents: write | ||
| steps: | ||
| - uses: SonarSource/ci-github-actions/promote@master # dogfood | ||
| - uses: SonarSource/ci-github-actions/promote@BUILD-10215-standardize-ghaction-output-logging # dogfood |
There was a problem hiding this comment.
Same concern here: referencing SonarSource/ci-github-actions/promote by a branch name is mutable and can change behavior over time without review in this repo. Pin to a commit SHA / immutable tag for the test run, and revert to the standard ref before merging.
| - uses: SonarSource/ci-github-actions/promote@BUILD-10215-standardize-ghaction-output-logging # dogfood | |
| - uses: SonarSource/ci-github-actions/promote@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # BUILD-10215-standardize-ghaction-output-logging |
SonarQube reviewer guide
|




Summary
BUILD-10215-standardize-ghaction-output-loggingbranch for testingTest plan
🤖 Generated with Claude Code