Skip to content

Conversation

nikhil2611
Copy link

This pull request updates the CI workflow and SonarQube configuration.

Description

CI Workflow Updates:

  • Added a new, feature-rich CI workflow stub for pull requests and pushes to the main branch.
  • Includes checks such as TruffleHog, Trivy, BlackDuck, SonarQube, SBOM generation, and more.
  • Provides documentation of inputs and secrets for easier setup and maintenance.

SonarQube Configuration Updates:

  • Updated sonar.projectName for clearer project identification and added sonar.language for clearer project configuration.
  • Added documentation, and improved configuration comments for clarity and maintainability

Issues Resolved

Check List

  • New functionality includes tests
  • All tests pass

Copy link

@nikhil2611 nikhil2611 changed the title Nikhil/enable blackduck sca Black Duck integration and CI/SonarQube updates Sep 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant