Philipp Born db85b4870a ci: run sonarcloud via pull_request_target (#43) ...

`on.pull_request` executes the workflow out of a forked repository. This means the `SONAR_TOKEN` secret will not be available and therefore the workflow will fail.
By changing it to `on.pull_request_target`, the workflow definition (and code) from the trusted original repository is run and the secret will be available.

see https://github.blog/2020-08-03-github-actions-improvements-for-fork-and-pull-request-workflows/

Co-authored-by: Mohamed Chiheb Ben Jemaa <mc.benjemaa@gmail.com>

2023-12-18 12:30:49 +00:00

..

ISSUE_TEMPLATE

Initial open source release

2023-11-29 14:17:03 +00:00

workflows

ci: run sonarcloud via pull_request_target (#43)

2023-12-18 12:30:49 +00:00

dependabot.yml

Initial open source release

2023-11-29 14:17:03 +00:00

PULL_REQUEST_TEMPLATE.md

Initial open source release

2023-11-29 14:17:03 +00:00