JAVASE-14 Unify Platform Dogfooding of sonar-java-symbolic-execution

[alban-auzeill]

JAVASE-14

Execution without only_if: https://cirrus-ci.com/build/5827115616043008
Result:

• https://sonarcloud.io/dashboard?id=SonarSource_sonar-java-symbolic-execution&pullRequest=37
• https://sonarqube.us/dashboard?id=SonarSource_sonar-java-symbolic-execution&pullRequest=37

[sonarqube-cloud-us]

🤖 Pull Request summary

Adds SonarQube shadow scanning and issue replication to CI pipeline.

• Creates new sonar_shadow_scan_and_issue_replication_task that runs on multiple SonarQube instances (sonarcloud.io and sonarqube.us)
• Adds shell script to build/analyze project on shadow instances and replicate issues using IRIS tool
• Updates promote task dependency to include the new shadow scan step

Review focus: The TODO comment suggests cron scheduling isn't implemented yet, and the script handles multiple sensitive tokens from vault storage.

💬 Please send your feedback

Quality Gate failed

Failed conditions
98 New issues

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 Dependency risks

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube