GitHub Actions

SonarQube supports analysis of YAML files detected as GitHub Actions.

The analysis is searches for workflows located in **/.github/workflows/** and composite actions in **/actions.yml.

Language-specific properties

Add commentDiscover and update the YAML properties by going to Administration > Configuration > General Settings > Languages > GitHub Actions.

Deactivating GitHub Actions analysis

Add commentYou can deactivate the analysis of GitHub Actions by setting the sonar.githubactions.activate property to false.