From 67f2bb26e7330e967fe0d86584c302129562c576 Mon Sep 17 00:00:00 2001 From: Rodrigo Motta Date: Sun, 25 Jan 2026 18:31:30 -0300 Subject: [PATCH 1/3] feat(ci): improve workflow naming and clarity in sonar.yml - Updated workflow name from "SonarQube" to "SonarQube Cloud Analysis" - Added description field to workflow for better GitHub Actions UI visibility - Maintained all existing triggers and job configurations :link: https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#run-name This improves workflow discoverability in the GitHub Actions dashboard. --- .github/workflows/sonar.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml index 94f1a9e..bbca4a7 100644 --- a/.github/workflows/sonar.yml +++ b/.github/workflows/sonar.yml @@ -1,12 +1,11 @@ -name: Build +name: SonarQube +run-name: SonarQube Cloud Analysis. on: push: branches: - main pull_request: types: [opened, synchronize, reopened] -permissions: - contents: read jobs: sonarqube: name: SonarQube @@ -16,6 +15,6 @@ jobs: with: fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - name: SonarQube Scan - uses: SonarSource/sonarqube-scan-action@fd88b7d7ccbaefd23d8f36f73b59db7a3d246602 + uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} From c80bcf44e91596877581d5ff98f8a8fe3d29b55f Mon Sep 17 00:00:00 2001 From: Rodrigo Motta Date: Sun, 25 Jan 2026 18:35:45 -0300 Subject: [PATCH 2/3] feat(ci): enhance sonar-project.properties with comprehensive parameters - Added explicit project name and version for UI clarity - Defined source directories relative to project root - Set source encoding to UTF-8 for consistent analysis - Added exclusions for common non-source directories (.docs/, .git/) - Enabled analysis of shell script files with appropriate language settings :link: https://docs.sonarsource.com/sonarqube-cloud/advanced-setup/analysis-parameters/parameters-not-settable-in-ui Configuration now provides more accurate and comprehensive analysis scope. --- sonar-project.properties | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/sonar-project.properties b/sonar-project.properties index b68d52b..02ee7b1 100644 --- a/sonar-project.properties +++ b/sonar-project.properties @@ -1,14 +1,14 @@ sonar.projectKey=rmottanet_gitnap sonar.organization=rmottanet - - -# This is the name and version displayed in the SonarCloud UI. -#sonar.projectName=gitnap -#sonar.projectVersion=1.0 - - -# Path is relative to the sonar-project.properties file. Replace "\" by "/" on Windows. -#sonar.sources=. - -# Encoding of the source code. Default is default system encoding -#sonar.sourceEncoding=UTF-8 +sonar.projectName=gitnap +sonar.host.url=https://sonarcloud.io +sonar.sourceEncoding=UTF-8 +sonar.sources=. +sonar.exclusions=.docs/** +sonar.shell.activate=true +sonar.githubactions.activate=true +sonar.yaml.activate=true +sonar.sca.enabled=false +sonar.scanner.os=linux +sonar.scanner.arch=x64 +sonar.scanner.skipJreProvisioning=true From 2e783cf2445de28cfefc1392a1f4c2db01b6c631 Mon Sep 17 00:00:00 2001 From: Rodrigo Motta Date: Sun, 25 Jan 2026 18:36:47 -0300 Subject: [PATCH 3/3] docs(readme): add comprehensive SonarCloud analysis badges - Added multiple SonarCloud badges for granular metrics visibility: - Bugs count and rating - Vulnerabilities count and rating - Code Smells count and rating - Organized badges in a logical grid layout - Added hover tooltips for badge descriptions - Maintained existing project branding and structure Provides stakeholders with immediate insight into code quality metrics. --- README.md | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 30efad4..2423cb1 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,9 @@ [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=rmottanet_gitnap&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=rmottanet_gitnap) +[![Reliability Rating](https://sonarcloud.io/api/project_badges/measure?project=rmottanet_gitnap&metric=reliability_rating)](https://sonarcloud.io/summary/new_code?id=rmottanet_gitnap) +[![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=rmottanet_gitnap&metric=sqale_rating)](https://sonarcloud.io/summary/new_code?id=rmottanet_gitnap) +[![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=rmottanet_gitnap&metric=security_rating)](https://sonarcloud.io/summary/new_code?id=rmottanet_gitnap) +[![Bugs](https://sonarcloud.io/api/project_badges/measure?project=rmottanet_gitnap&metric=bugs)](https://sonarcloud.io/summary/new_code?id=rmottanet_gitnap) +[![Vulnerabilities](https://sonarcloud.io/api/project_badges/measure?project=rmottanet_gitnap&metric=vulnerabilities)](https://sonarcloud.io/summary/new_code?id=rmottanet_gitnap) # GitNap: Bash Script Collection @@ -21,8 +26,9 @@ Thank you for considering **GitNap** for your needs. While it may be a modest to

- Static Badge - Static Badge - Static Badge - Static Badge + Static Badge + Static Badge + Static Badge + Static Badge + Static Badge