agentic-dev-library / thumbcode / 21932543781

56%

push

github

fix(ci): extract SonarCloud into separate job to unblock tests

The org's action-pinning policy validates ALL action references during
job preparation (before any step runs). The SonarCloud GitHub Action
internally references sonarsource/sonarqube-scan-action@v5.0.0 with
a version tag, causing the entire test job to fail at preparation
time — even with continue-on-error.

Fix: Extract SonarCloud into its own job using the CLI scanner directly,
with continue-on-error at the job level. Tests and coverage upload now
run in a clean job without any problematic action references.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

323 of 2098 branches covered (15.4%)

Branch coverage included in aggregate %.

909 of 2845 relevant lines covered (31.95%)

1.66 hits per line