chore(ci): bump SonarSource/sonarqube-scan-action from 8.0.0 to 8.1.0

[dependabot]

Bumps SonarSource/sonarqube-scan-action from 8.0.0 to 8.1.0.

Release notes

Sourced from SonarSource/sonarqube-scan-action's releases.

v8.1.0

What's Changed

• SQSCANGHA-146 Add proxy support for GPG keyserver access by @​henryju in SonarSource/sonarqube-scan-action#244
• SQSCANGHA-148 Update SonarScanner CLI to 8.1.0.6389 by @​github-actions[bot] in SonarSource/sonarqube-scan-action#232

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0

Commits

• 7006c44 Update SonarScanner CLI to 8.1.0.6389
• edd319f NO-JIRA Bump actions/setup-node from 6.3.0 to 6.4.0 (#234)
• e050aa9 NO-JIRA Bump actions/cache from 5.0.4 to 5.0.5 (#231)
• 6cd3d8f NO-JIRA Bump madhead/semver-utils from 4.3.0 to 5.0.0
• 5656853 SQSCANGHA-146 Add proxy support for GPG keyserver access (#244)
• c444753 SQSCANGHA-140 Add the missing requirements in README.md (#243)
• See full diff in compare view

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/SonarSource/sonarqube-scan-action	7006c4492b2e0ee0f816d36501671557c97f5995	🟢 6.1	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 5 dependency not pinned by hash detected -- score normalized to 5 License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ 1 branch protection is not maximal on development and all release branches SAST ⚠️ 2 SAST tool is not run on all commits -- score normalized to 2

Scanned Files

• .github/workflows/sonarcloud.yml

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

This is a Dependabot PR updating the SonarSource sonarqube-scan-action from v8.0.0 to v8.1.0. The change is a single line update to the GitHub Actions workflow file. The dependency review indicates no vulnerabilities or license issues.

Files Reviewed (1 file)

• .github/workflows/sonarcloud.yml - Dependabot version bump

---

_{Reviewed by laguna-m.1-20260312:free · 139,875 tokens}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Superseded by #112.