ci: update of files from global .github repo - #393
Quality Gate failed
Failed conditions
See analysis details on SonarQube Cloud
Annotations
Check warning on line 213 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DK&open=AZ-yAbIqdigWn1S23_DK&pullRequest=393
Check warning on line 262 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DN&open=AZ-yAbIqdigWn1S23_DN&pullRequest=393
Check warning on line 66 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DE&open=AZ-yAbIqdigWn1S23_DE&pullRequest=393
Check warning on line 311 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DO&open=AZ-yAbIqdigWn1S23_DO&pullRequest=393
Check warning on line 213 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DL&open=AZ-yAbIqdigWn1S23_DL&pullRequest=393
Check warning on line 115 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DG&open=AZ-yAbIqdigWn1S23_DG&pullRequest=393
Check warning on line 164 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DJ&open=AZ-yAbIqdigWn1S23_DJ&pullRequest=393
Check warning on line 164 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DI&open=AZ-yAbIqdigWn1S23_DI&pullRequest=393
Check warning on line 66 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DF&open=AZ-yAbIqdigWn1S23_DF&pullRequest=393
Check warning on line 311 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DP&open=AZ-yAbIqdigWn1S23_DP&pullRequest=393
Check warning on line 82 in .github/workflows/release-announcements.yml
sonarqubecloud / SonarCloud Code Analysis
Define exact package version to avoid installing unverified releases.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbFrdigWn1S23_DD&open=AZ-yAbFrdigWn1S23_DD&pullRequest=393
Check warning on line 72 in .github/workflows/if-nodejs-pr-testing.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAUOGdigWn1S23-MA&open=AZ-yAUOGdigWn1S23-MA&pullRequest=393
Check warning on line 76 in .github/workflows/if-nodejs-pr-testing.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAUOGdigWn1S23-MB&open=AZ-yAUOGdigWn1S23-MB&pullRequest=393
Check warning on line 82 in .github/workflows/release-announcements.yml
sonarqubecloud / SonarCloud Code Analysis
"npx" can install packages on-demand and run their lifecycle scripts.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbFrdigWn1S23_DC&open=AZ-yAbFrdigWn1S23_DC&pullRequest=393
Check warning on line 262 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DM&open=AZ-yAbIqdigWn1S23_DM&pullRequest=393
Check warning on line 115 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_java-spring-cloud-stream-template&issues=AZ-yAbIqdigWn1S23_DH&open=AZ-yAbIqdigWn1S23_DH&pullRequest=393