Skip to content

.readthedocs.yml: Upgrade build's OS (3.3)#3113

Open
adriendupuis wants to merge 1 commit into3.3from
update-readthedocs-3.3
Open

.readthedocs.yml: Upgrade build's OS (3.3)#3113
adriendupuis wants to merge 1 commit into3.3from
update-readthedocs-3.3

Conversation

@adriendupuis
Copy link
Copy Markdown
Contributor

@adriendupuis adriendupuis commented Mar 30, 2026

Question Answer
JIRA Ticket N/A
Versions 5.0, 4.6, 3.3, 2.5
Edition N/A

See #3111 for description and related PRs

@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
14 Security Hotspots
17.2% Duplication on New Code (required ≤ 3%)
E Security Rating on New Code (required ≥ A)
D Reliability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

- name: Create comment for changed files
run: |
file_limit=100
build_url="https://ez-systems-developer-documentation--${{ github.event.pull_request.number }}.com.readthedocs.build/${{inputs.project}}en/${{ github.event.pull_request.number }}/"

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High

inputs.project is vulnerable to script injection: values of inputs are provided by whoever triggers the workflow. Change this workflow to not use user-controlled data directly in a run block, for example by assigning this expression to an environment variable. See more on SonarQube Cloud

// User credentials
$username = 'admin';
$password = 'publish';

Check failure

Code scanning / SonarCloud

Credentials should not be hard-coded High

Detected 'password' in this variable name, review this potentially hardcoded credential. See more on SonarQube Cloud

// User credentials
$username = 'admin';
$password = 'publish';

Check failure

Code scanning / SonarCloud

Credentials should not be hard-coded High

Detected 'password' in this variable name, review this potentially hardcoded credential. See more on SonarQube Cloud
@adriendupuis adriendupuis changed the base branch from 5.0 to 3.3 March 30, 2026 14:48
@adriendupuis adriendupuis marked this pull request as ready for review March 30, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants