ci(deps): update actions/checkout action to v7.0.1 - #951
Quality Gate failed
Failed conditions
See analysis details on SonarQube Cloud
Annotations
Check warning on line 63 in .github/workflows/build-and-deploy.yml
sonarqubecloud / SonarCloud Code Analysis
Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
See more on https://sonarcloud.io/project/issues?id=AlchemistSimulator_SAPERE-incarnation-tutorial&issues=AZ-BEE9wgaYF5ReL8EMo&open=AZ-BEE9wgaYF5ReL8EMo&pullRequest=951
Check warning on line 63 in .github/workflows/build-and-deploy.yml
sonarqubecloud / SonarCloud Code Analysis
Using dependencies without locking resolved versions is security-sensitive.
See more on https://sonarcloud.io/project/issues?id=AlchemistSimulator_SAPERE-incarnation-tutorial&issues=AZ-BEE9wgaYF5ReL8EMp&open=AZ-BEE9wgaYF5ReL8EMp&pullRequest=951
Check warning on line 64 in .github/workflows/build-and-deploy.yml
sonarqubecloud / SonarCloud Code Analysis
"npx" can install packages on-demand and run their lifecycle scripts.
See more on https://sonarcloud.io/project/issues?id=AlchemistSimulator_SAPERE-incarnation-tutorial&issues=AZ-BEE9wgaYF5ReL8EMq&open=AZ-BEE9wgaYF5ReL8EMq&pullRequest=951
Check warning on line 64 in .github/workflows/build-and-deploy.yml
sonarqubecloud / SonarCloud Code Analysis
Define exact package version to avoid installing unverified releases.
See more on https://sonarcloud.io/project/issues?id=AlchemistSimulator_SAPERE-incarnation-tutorial&issues=AZ-BEE9wgaYF5ReL8EMr&open=AZ-BEE9wgaYF5ReL8EMr&pullRequest=951