sonar-project.properties

# SonarCloud configuration.
#
# Scoped exclusions for rules that do not apply to this project:
# - docker:S6506: all curl calls in the Dockerfiles enforce https
#   (--proto '=https' --proto-redir '=https') and downloads are verified
#   against a GPG-signed SHA-256 checksum before use.
# - githubactions:S8543: dependencies are locked with a committed bun.lock
#   and installed with --frozen-lockfile; SonarCloud does not recognize
#   bun.lock as a lockfile.
# - githubactions:S6505: bun install already passes --ignore-scripts.
sonar.issue.ignore.multicriteria.e1.ruleKey=docker:S6506
sonar.issue.ignore.multicriteria.e1.resourceKey=**/dockerfile
sonar.issue.ignore.multicriteria.e2.ruleKey=docker:S6506
sonar.issue.ignore.multicriteria.e2.resourceKey=**/templates/*.dockerfile
sonar.issue.ignore.multicriteria.e3.ruleKey=githubactions:S8543
sonar.issue.ignore.multicriteria.e3.resourceKey=.github/workflows/release.yml
sonar.issue.ignore.multicriteria.e4.ruleKey=githubactions:S6505
sonar.issue.ignore.multicriteria.e4.resourceKey=.github/workflows/release.yml