[damien-urruty-sonarsource]

Summary

• Log a warning in ScannerEndpointResolver when sonar.host.url is defined together with sonar.scanner.sonarcloudUrl and/or sonar.scanner.apiBaseUrl, since only the host URL is used to resolve endpoints (including API URL for engine download)
• Add unit tests covering the warning and the no-warning case

[hashicorp-vault-sonar-prod]

SCANJLIB-334

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
95.5% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Adding a warning when sonar.host.url overrides Cloud URL properties changes scanner logs and could flag intentional mixed configurations; endpoint selection remains unchanged.

Adds a warning in ScannerEndpointResolver when sonar.host.url is set alongside sonar.scanner.sonarcloudUrl or sonar.scanner.apiBaseUrl, since only the host URL is used to resolve endpoints. Unit tests cover both the warning and the no-warning case. No issues found.

Verification Repos 4 inspected

Functional validation No results

Rules No rules evaluated

Broader impact Repos 4 inspected

Cross-repo 4 repositories inspected 0 open impacts

SonarSource/sonar-scanner-cli Inspected
SonarSource/sonar-scanner-maven Inspected
SonarSource/sonar-scanner-gradle Inspected
SonarSource/sonar-scanner-cargo Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}