GitHub Actions

SonarQube supports analysis of YAML files detected as GitHub Actions. The analysis is searching for workflows located in **/.github/workflows/** and composite actions in  **/actions.yml.

Language-specific properties

Discover and update the YAML properties in Your Project > Administration > General Settings > Languages > GitHub Actions.

Deactivating GitHub Actions analysis

You can deactivate the analysis of GitHub Actions by setting the sonar.githubactions.activate property to false.