Skip to content

build(deps): bump azure/login from 2.3.0 to 3.0.0 #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Mehdi-Bl merged 2 commits into from
Mar 21, 2026
Merged

build(deps): bump azure/login from 2.3.0 to 3.0.0 #36

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e48f3a1
build(deps): bump azure/login from 2.3.0 to 3.0.0
dependabot[bot] Mar 19, 2026
fb8dbb5
ci: harden sonarcloud workflow
Mehdi-Bl Mar 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions .github/workflows/sonarcloud.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ jobs:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
fetch-depth: 0
persist-credentials: false

- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
with:
Expand All @@ -39,7 +40,7 @@ jobs:

- name: Azure login (OIDC)
if: ${{ github.event_name != 'pull_request' || (github.event.pull_request.head.repo.fork == false && contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.pull_request.author_association)) }}
uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5
uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43
with:
client-id: ${{ vars.AZURE_CLIENT_ID }}
tenant-id: ${{ vars.AZURE_TENANT_ID }}
Expand All @@ -48,11 +49,13 @@ jobs:
- name: Read SonarCloud token from Key Vault
if: ${{ github.event_name != 'pull_request' || (github.event.pull_request.head.repo.fork == false && contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.pull_request.author_association)) }}
id: sonar_token
env:
AZURE_KEYVAULT_NAME: ${{ vars.AZURE_KEYVAULT_NAME }}
shell: bash
run: |
set -euo pipefail
SONAR_TOKEN="$(az keyvault secret show \
--vault-name "${{ vars.AZURE_KEYVAULT_NAME }}" \
--vault-name "$AZURE_KEYVAULT_NAME" \
--name "sonar-cloud-token" \
--query value -o tsv)"
if [ -z "${SONAR_TOKEN}" ]; then
Expand Down
Loading