Skip to content

fix(sonar): point at this repo's own SonarCloud project - #25

Merged
hyperpolymath merged 1 commit into
mainfrom
fix/sonar-project-key
Jul 27, 2026
Merged

fix(sonar): point at this repo's own SonarCloud project#25
hyperpolymath merged 1 commit into
mainfrom
fix/sonar-project-key

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

sonar.projectKey was hyperpolymath_rsr-template-repo — the template repo's own key, copied verbatim when this repo was derived from it. Points it at its own project instead. sonar.organization is unchanged.

Why now, and why keys before tokens

This repo has no SONAR_TOKEN secret, so the scan currently aborts at authentication and submits nothing:

##[warning]Running this GitHub Action without SONAR_TOKEN is not recommended
ERROR Not authorized or project not found. Please check the 'SONAR_TOKEN' environment
      variable, the 'sonar.projectKey' and 'sonar.organization' properties, ...

So the wrong key is latent, not actively corrupting anything. But the moment SONAR_TOKEN is added, this repo would start reporting its analysis into hyperpolymath_rsr-template-repo, mixed in with every other repo carrying the copied key. Fixing the key first means that never happens.

Found in an estate-wide sweep of sonar-project.properties files against the SonarCloud API. Same fix already merged in hyperpolymath/systemet#20 and hyperpolymath/rsr-julia-library-template-repo#16.

Organisation

hyperpolymath is correct and unchanged here. The estate consolidates SonarCloud under the single hyperpolymath organisation regardless of GitHub org — settled in metadatastician/IDApTIK#42.

Test plan

  • Only sonar.projectKey and the project URL in the header comment change
  • sonar.organization untouched
  • Owner to provision the project and add SONAR_TOKEN — the workflow cannot pass without both, independent of this change

🤖 Generated with Claude Code

sonar.projectKey was hyperpolymath_rsr-template-repo, copied verbatim from
the RSR template this repo was derived from.

The workflow currently fails at authentication (no SONAR_TOKEN secret), so
nothing is being mis-submitted today -- but once a token is added this repo
would report into the template's project alongside every other repo with
the copied key. Fix the key first.

Organisation is unchanged: the estate consolidates SonarCloud under the
single hyperpolymath org (metadatastician/IDApTIK#42).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath marked this pull request as ready for review July 27, 2026 13:04
@hyperpolymath
hyperpolymath merged commit 5884a10 into main Jul 27, 2026
37 of 43 checks passed
@hyperpolymath
hyperpolymath deleted the fix/sonar-project-key branch July 27, 2026 13:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant