Fix SonarCloud scanning

- checkout depth already specified by actions/checkout
- exclude from Sonar analysis vendored Conan recipes which we don't want to change
- update jinja2 Python module

Signed-off-by: Jean-Francois Panisset <panisset@gmail.com>

Author: jfpanisset

.github/workflows/python-sonar.yml

@@ -32,9 +32,6 @@ jobs:
     - name: Run pylint linter
       run: pipenv run pytest python/aswfdocker --doctest-modules --pylint --junitxml=test-pylint-results.xml --cov=. --cov-report=xml
 
-    - name: Fetch unshallow to help sonar
-      run: git fetch --unshallow
-
     - name: Install and Run Sonar Scanner
       uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 # v7.0.0
       env:

CHANGELOG.md

@@ -8,6 +8,7 @@ All notable changes to this project will be documented in this file.
   - Update GitHub action versions for [NodeJS 24](https://github.com/AcademySoftwareFoundation/aswf-docker/issues/350)
   - Update some Python dependencies
   - [Enable building iv for OpenImageIO](https://github.com/AcademySoftwareFoundation/aswf-docker/issues/357) to include Qt in ci-oiio, re-release ci-oiio 2026.3 / 2025.5 / 2024.6 images
+  - Update and fix [SonarCloud scanning](https://github.com/AcademySoftwareFoundation/aswf-docker/issues/331), excluding vendored Conan recipes from analysis
 
 # 2026-02-24
 

Pipfile.lock

@@ -1,6 +1,7 @@
 sonar.organization=academysoftwarefoundation
 sonar.projectKey=AcademySoftwareFoundation_aswf-docker
 sonar.sources=.
+sonar.exclusions=packages/conan/recipes
 sonar.python.coverage.reportPaths=coverage.xml
 sonar.python.pylint.reportPath=test-pylint-results.xml
 sonar.python.xunit.reportPath=test-pytest-results.xml