Repository navigation

fix(ci): drop the leftover trufflehog step — the estate retired it for gitleaks #58

	# SPDX-License-Identifier: MPL-2.0
	# SonarQube Cloud (SonarCloud) static analysis. Analysis scope + exclusions live
	# in sonar-project.properties. Requires the SONAR_TOKEN repository secret
	# (Settings -> Secrets and variables -> Actions) and a SonarCloud project:
	# https://sonarcloud.io/project/overview?id=hyperpolymath_rsr-template-repo
	# Mirrors the boj-server arrangement.
	name: SonarQube
	on:
	push:
	branches: [main, master]
	pull_request:
	branches: [main, master]
	workflow_dispatch:
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true
	permissions:
	contents: read
	jobs:
	sonarqube:
	name: SonarQube
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	fetch-depth: 0 # full history for accurate new-code detection
	- name: SonarQube Scan
	uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1
	env:
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}