From 24d9d49883b89689267235e2dc94163f844692b0 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 12 Nov 2025 16:50:43 +0000 Subject: [PATCH 1/2] Initial plan From 744759c7145b620ce22875712311301af7045d23 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 12 Nov 2025 16:54:21 +0000 Subject: [PATCH 2/2] Skip SonarCloud analysis for Dependabot PRs Co-authored-by: thomasturrell <1552612+thomasturrell@users.noreply.github.com> --- .github/workflows/maven_pull_request.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/maven_pull_request.yml b/.github/workflows/maven_pull_request.yml index 954662a4..9a4579d1 100644 --- a/.github/workflows/maven_pull_request.yml +++ b/.github/workflows/maven_pull_request.yml @@ -22,11 +22,12 @@ jobs: run: mvn -B verify --file pom.xml - name: Scan with Sonar run: | - if [ $FORK = false ] + if [ $FORK = false ] && [ "$ACTOR" != "dependabot[bot]" ] then mvn org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=BerryCloud_xapi-java -Dsonar.organization=berrycloud --file pom.xml fi env: FORK: ${{ github.event.pull_request.head.repo.fork }} + ACTOR: ${{ github.actor }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}