Remove sudo usage for jq installation in sonarqube.yml
All checks were successful
golangci-lint / lint (push) Successful in 47s
REUSE Compliance Check / test (push) Successful in 4s
SonarQube / Build (push) Successful in 1m37s

The use of sudo keyword for installing 'jq' in the SonarQube workflow file, sonarqube.yml, has been removed. This change is due to the fact that the root permission is not necessary during the installation process, adhering better to the principle of least privilege.
This commit is contained in:
Winni Neessen 2024-02-14 00:46:07 +01:00
parent a536ac3bde
commit 072a2aed5d
Signed by: wneessen
GPG key ID: 5F3AF39B820C119D

View file

@ -32,7 +32,7 @@ jobs:
- name: Install jq
run: |
apt-get -y install jq; which jq
apt-get update; apt-get -y install jq; which jq
- uses: sonarsource/sonarqube-scan-action@master
env: