Tristan Radisson

for now the optaplanner-quickstarts native is done as part optaplanner native nightly. So I doubt it is needed for now. Also there is an ongoing work to reuse the build-chain...

Hello ! I just discovered this project and would be interested into participating. Thinking also about new features that we could discuss later when I get familiar with the project...

cc @evacchi @mariofusco

@ricardozanini I think we will need to review the check ;) Will do when I get back from F2F

well you cannot update easily the `sonar.yml` unless a PR is merged. So there should be no security issue there. when executed, it will always use the file from the...

> @radtriste i asked because if leaked away, somebody can use it outside github and our CI, right? I do understand that. But given the sonarcloud job will only be...

@mareknovotny and a good read: https://nathandavison.com/blog/github-actions-and-the-threat-of-malicious-pull-requests :)

> @mareknovotny and a good read: https://nathandavison.com/blog/github-actions-and-the-threat-of-malicious-pull-requests :) @shubhbapna Could you add this link to the `sonar.yaml` file so we know where that is coming from ?

jenkins retest this

jenkins retest this