ci: update of files from global .github repo - #229
Quality Gate failed
Failed conditions
See analysis details on SonarQube Cloud
Annotations
Check warning on line 73 in .github/workflows/if-nodejs-release.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yAY3eJTAjg_VcCftY&open=AZ-yAY3eJTAjg_VcCftY&pullRequest=229
Check warning on line 66 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIi&open=AZ-yA3_t4JI-G58RWrIi&pullRequest=229
Check warning on line 213 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIo&open=AZ-yA3_t4JI-G58RWrIo&pullRequest=229
Check warning on line 49 in .github/workflows/if-nodejs-version-bump.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yAY47JTAjg_VcCftc&open=AZ-yAY47JTAjg_VcCftc&pullRequest=229
Check warning on line 82 in .github/workflows/release-announcements.yml
sonarqubecloud / SonarCloud Code Analysis
"npx" can install packages on-demand and run their lifecycle scripts.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3-A4JI-G58RWrIg&open=AZ-yA3-A4JI-G58RWrIg&pullRequest=229
Check warning on line 164 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIn&open=AZ-yA3_t4JI-G58RWrIn&pullRequest=229
Check warning on line 66 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIj&open=AZ-yA3_t4JI-G58RWrIj&pullRequest=229
Check warning on line 72 in .github/workflows/if-nodejs-pr-testing.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yAk_8YbEv2nKEF2MY&open=AZ-yAk_8YbEv2nKEF2MY&pullRequest=229
Check warning on line 311 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIs&open=AZ-yA3_t4JI-G58RWrIs&pullRequest=229
Check warning on line 164 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIm&open=AZ-yA3_t4JI-G58RWrIm&pullRequest=229
Check warning on line 125 in .github/workflows/if-nodejs-release.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yAY3eJTAjg_VcCftZ&open=AZ-yAY3eJTAjg_VcCftZ&pullRequest=229
Check warning on line 115 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIl&open=AZ-yA3_t4JI-G58RWrIl&pullRequest=229
Check warning on line 140 in .github/workflows/if-nodejs-release.yml
sonarqubecloud / SonarCloud Code Analysis
"npx" can install packages on-demand and run their lifecycle scripts.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yAY3eJTAjg_VcCftb&open=AZ-yAY3eJTAjg_VcCftb&pullRequest=229
Check warning on line 115 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIk&open=AZ-yA3_t4JI-G58RWrIk&pullRequest=229
Check warning on line 311 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIt&open=AZ-yA3_t4JI-G58RWrIt&pullRequest=229
Check warning on line 213 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIp&open=AZ-yA3_t4JI-G58RWrIp&pullRequest=229
Check warning on line 128 in .github/workflows/if-nodejs-release.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yAY3eJTAjg_VcCfta&open=AZ-yAY3eJTAjg_VcCfta&pullRequest=229
Check warning on line 262 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIr&open=AZ-yA3_t4JI-G58RWrIr&pullRequest=229
Check warning on line 262 in .github/workflows/notify-tsc-members-mention.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3_t4JI-G58RWrIq&open=AZ-yA3_t4JI-G58RWrIq&pullRequest=229
Check warning on line 76 in .github/workflows/if-nodejs-pr-testing.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yAk_8YbEv2nKEF2MZ&open=AZ-yAk_8YbEv2nKEF2MZ&pullRequest=229
Check warning on line 82 in .github/workflows/release-announcements.yml
sonarqubecloud / SonarCloud Code Analysis
Define exact package version to avoid installing unverified releases.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yA3-A4JI-G58RWrIh&open=AZ-yA3-A4JI-G58RWrIh&pullRequest=229
Check warning on line 69 in .github/workflows/if-nodejs-release.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ-yAY3eJTAjg_VcCftX&open=AZ-yAY3eJTAjg_VcCftX&pullRequest=229