chore(deps): update sonarsource/sonarcloud-github-action action to v2.2.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/sonarcloud-github-action	action	minor	v2.1.1 -> v2.2.0

---

Release Notes

SonarSource/sonarcloud-github-action (SonarSource/sonarcloud-github-action)

v2.2.0

Compare Source

What's Changed

• docs: update checkout GitHub Action to the latest version by @​froblesmartin in https://github.com/SonarSource/sonarcloud-github-action/pull/61
• SC-12363 Improve the SonarCloud Intro in README.md by @​claire-villard-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/65
• Makes sonarsource/analysis-experience-squad the code owner by @​alexandre-odoux-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/66
• SCSCANGHA-3 Update the condition to detect "build.gradle.kts" files by @​leveretka in https://github.com/SonarSource/sonarcloud-github-action/pull/71
• SCSCANGHA-6 Add Github Actions tests by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/72
• SCSCANGHA-6 Fix main branch name in GitHub workflow by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/73
• SCSCANGHA-9 Enable Mend scan by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/75
• Enable debug logging when GitHub Actions debug logging is enabled by @​ari-becker in https://github.com/SonarSource/sonarcloud-github-action/pull/43
• SCSCANGHA-15 Add test for scanner debug logging by @​istvan-bodo-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/77
• SCSCANGHA-13 Warning instead of failure for Maven/Gradle projects by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/76
• SCSCANGHA-5 Update the base image by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/78
• SCSCANGHA-16 Support passing args with spaces by @​istvan-bodo-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/79
• Use a placeholder for the action version in README by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/80
• Drop GH token from README by @​bogdanakushnir in https://github.com/SonarSource/sonarcloud-github-action/pull/46

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/SonarSource/sonarcloud-github-action	4006f663ecaf1f8093e8e4abb9227f6041f52216	🟢 5.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 5 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Vulnerabilities 🟢 10 0 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0
actions/SonarSource/sonarcloud-github-action	49e6cd3b187936a73b8280d59ffd9da69df63ec9	🟢 5.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 5 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Vulnerabilities 🟢 10 0 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0

Scanned Manifest Files

.github/workflows/sonarscan.yml

• SonarSource/sonarcloud-github-action@4006f66
• SonarSource/sonarcloud-github-action@49e6cd3

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud