chore: Suppress SonarCloud GitHub Actions commit SHA rule

johngrimes · johngrimes · commit 09a579bc49e2 · 2026-02-20T20:01:49.000+10:00
Ignore githubactions:S7637 (external actions without full commit
SHA) for all workflow files, as pinning to commit SHAs for
well-known actions is impractical.
diff --git a/sonar-project.properties b/sonar-project.properties
@@ -0,0 +1,7 @@
+sonar.projectKey=aehrc_pathling
+sonar.organization=aehrc
+sonar.projectName=Pathling
+sonar.sourceEncoding=UTF-8
+sonar.issue.ignore.multicriteria=e1
+sonar.issue.ignore.multicriteria.e1.ruleKey=githubactions:S7637
+sonar.issue.ignore.multicriteria.e1.resourceKey=.github/workflows/**
