chore: Ignore via sonar properties

Author: hypery2k

.github/workflows/release.yml

@@ -20,15 +20,13 @@ jobs:
             id-token: write
         steps:
 
-            # sonarcloud-ignore githubactions:S7637
             -   uses: actions/create-github-app-token@v2
                 id: app-token
                 with:
                     app-id: ${{ vars.CI_APP_ID }}
                     private-key: ${{ secrets.CI_PRIVATE_KEY }}
 
             -   name: Checkout
-                # sonarcloud-ignore githubactions:S7637
                 uses: actions/checkout@v5
                 with:
                     fetch-depth: 0
@@ -47,14 +45,12 @@ jobs:
                     git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com>'
 
             -   name: Setup NodeJS
-                # sonarcloud-ignore githubactions:S7637
                 uses: actions/setup-node@v5
                 with:
                     node-version: "22"
                     registry-url: "https://registry.npmjs.org"
 
             -   name: Setup Java
-                # sonarcloud-ignore githubactions:S7637
                 uses: actions/setup-java@v5
                 with:
                     distribution: "temurin" # As good as any other, see: https://github.com/actions/setup-java#supported-distributions
@@ -64,7 +60,6 @@ jobs:
                     cache: "maven"
 
             -   name: Setup settings.xml
-                # sonarcloud-ignore githubactions:S7637
                 uses: s4u/[email protected]
                 with:
                     override: true
@@ -117,7 +112,6 @@ jobs:
 
             -   name: Create Release on GH
                 id: tag-and-release
-                # sonarcloud-ignore githubactions:S7637
                 uses: avakar/tag-and-release@v1
                 with:
                     draft: true
@@ -127,7 +121,6 @@ jobs:
                     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
             -   name: Add SPI to github release
-                # sonarcloud-ignore githubactions:S7637
                 uses: actions/upload-release-asset@v1
                 with:
                     upload_url: ${{ steps.tag-and-release.outputs.upload_url }}

sonar-project.properties

@@ -0,0 +1,7 @@
+sonar.issue.ignore.multicriteria=e1,e2,e3
+sonar.issue.ignore.multicriteria.e1.ruleKey=githubactions:S7636
+sonar.issue.ignore.multicriteria.e1.resourceKey=**/.github/workflows/**/*.yml
+sonar.issue.ignore.multicriteria.e2.ruleKey=githubactions:S7630
+sonar.issue.ignore.multicriteria.e2.resourceKey=**/.github/workflows/**/*.yml
+sonar.issue.ignore.multicriteria.e3.ruleKey=githubactions:S7637
+sonar.issue.ignore.multicriteria.e3.resourceKey=**/.github/workflows/**/*.yml