From e11d40bdda5f2628229ec3456ac3faad77ecc1e8 Mon Sep 17 00:00:00 2001 From: nocci Date: Tue, 30 Dec 2025 13:01:14 +0000 Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20ci(build):=20enforce=20sonar=20h?= =?UTF-8?q?ost=20url=20secret=20presence?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - update HOST_URL to require SONAR_HOST_URL secret for enhanced security configuration - improve error handling by ensuring critical secrets are set --- .forgejo/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml index 501cf33..b1cbd6d 100644 --- a/.forgejo/workflows/build.yml +++ b/.forgejo/workflows/build.yml @@ -34,7 +34,7 @@ jobs: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} SONAR_PROJECT_KEY: ${{ secrets.SONAR_PROJECT_KEY }} run: | - HOST_URL=${SONAR_HOST_URL:-https://sonata.cyber77.de} + HOST_URL=${SONAR_HOST_URL:?SONAR_HOST_URL secret not set} PROJECT_KEY="${SONAR_PROJECT_KEY}" if [ -z "$PROJECT_KEY" ] && [ -f sonar-project.properties ]; then PROJECT_KEY=$(grep -E '^sonar.projectKey=' sonar-project.properties | cut -d= -f2 | tr -d '\r')