Use Sonar token as maven property, lock down plugin version
@@ -32,10 +32,9 @@ jobs:
java-version: 11
- name: Test with Sonar
run: >
- ./mvnw -V --no-transfer-progress clean verify javadoc:javadoc org.sonarsource.scanner.maven:sonar-maven-plugin:sonar
+ ./mvnw -V --no-transfer-progress clean verify javadoc:javadoc
+ org.sonarsource.scanner.maven:sonar-maven-plugin:3.7.0.1746:sonar
-Dsonar.host.url=https://sonarcloud.io
+ -Dsonar.login=${{ secrets.SONAR_TOKEN }}
-Dsonar.organization=assertj
-Dsonar.projectKey=joel-costigliola_assertj-core
- env:
- GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
