Stirling-PDF/.github/workflows
Ludy 3d7eb040ab
Fix: Replace pull_request with pull_request_target in SonarQube Workflow for Fork Analysis (#2977)
# Description of Changes

Please provide a summary of the changes, including:

This update changes the workflow trigger for SonarQube from using the
`pull_request` event to `pull_request_target` for the "main" branch. By
doing so, the workflow runs in the context of the base repository,
ensuring that the required secrets (like `SONAR_TOKEN`) are available
during execution—even when analyzing code from forked repositories. This
change enables full Sonar analysis for PRs from forks while being
mindful of potential security implications.

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#6-testing)
for more details.
2025-02-17 20:26:18 +00:00
..
auto-labeler.yml Bump step-security/harden-runner from 2.10.3 to 2.10.4 (#2761) 2025-01-21 11:11:01 +00:00
build.yml Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (#2922) 2025-02-10 10:51:41 +00:00
check_properties.yml Bump actions/setup-python from 5.3.0 to 5.4.0 (#2856) 2025-02-03 10:09:15 +00:00
codeql.yml-disabled Bump: Harden Runner from v2.10.2 to v2.10.3 (#2686) 2025-01-13 22:26:05 +00:00
dependency-review.yml Bump step-security/harden-runner from 2.10.3 to 2.10.4 (#2761) 2025-01-21 11:11:01 +00:00
licenses-update.yml Bump gradle/actions from 4.2.2 to 4.3.0 (#2870) 2025-02-04 10:42:29 +00:00
manage-label.yml Bump crazy-max/ghaction-github-labeler from 5.1.0 to 5.2.0 (#2854) 2025-02-03 10:07:54 +00:00
multiOSReleases.yml Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (#2901) 2025-02-17 10:24:25 +00:00
PR-Demo-cleanup.yml Update PR-Demo-cleanup.yml (#2817) 2025-01-30 18:40:05 +00:00
PR-Demo-Comment.yml Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (#2922) 2025-02-10 10:51:41 +00:00
pre_commit.yml Bump actions/setup-python from 5.3.0 to 5.4.0 (#2856) 2025-02-03 10:09:15 +00:00
push-docker.yml Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (#2901) 2025-02-17 10:24:25 +00:00
releaseArtifacts.yml Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (#2901) 2025-02-17 10:24:25 +00:00
scorecards.yml Bump github/codeql-action from 3.28.8 to 3.28.9 (#2921) 2025-02-10 10:51:50 +00:00
sonarqube.yml Fix: Replace pull_request with pull_request_target in SonarQube Workflow for Fork Analysis (#2977) 2025-02-17 20:26:18 +00:00
stale.yml Bump actions/stale from 9.0.0 to 9.1.0 (#2803) 2025-01-30 10:43:17 +00:00
swagger.yml Bump gradle/actions from 4.2.2 to 4.3.0 (#2870) 2025-02-04 10:42:29 +00:00
sync_files.yml removes remnants of verification metadata (#2884) 2025-02-04 20:58:06 +00:00
testdriver.yml Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (#2922) 2025-02-10 10:51:41 +00:00