Update sonarcloud.yml

This commit is contained in:
Alexey Pustovalov 2024-02-13 23:08:47 +09:00 committed by GitHub
parent 8b2d694135
commit a4b5cea508
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -43,6 +43,17 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Block egress traffic
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with:
egress-policy: audit
- name: Checkout repository
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with:
# Disabling shallow clone is recommended for improving relevancy of reporting
fetch-depth: 0
- name: Analyze with SonarCloud
# You can pin the exact commit or the version.