dsh-sonarqube

Configuration

Environment variables are recommended so credentials do not appear in a profile patch:

export SONARQUBE_URL='https://sonarqube.example.com'
export SONARQUBE_TOKEN='your-token'

Plugin config takes precedence over environment variables:

Config	Environment fallback	Default
baseUrl	SONARQUBE_URL	required
token	SONARQUBE_TOKEN	required
requestTimeoutMs	none	30000
maxResponseBytes	none	5242880 (5 MiB)

Do not put token in cordis.patch.yml. If you need non-secret overrides, add a later profile patch (later rows replace the row's whole config):

- id: dsh-sonarqube
  name: dsh-sonarqube
  config:
    baseUrl: 'https://sonarqube.example.com'
    requestTimeoutMs: 30000
    maxResponseBytes: 5242880

The bundle included in this package mounts the plugin without credentials:

- insert:
    - id: dsh-sonarqube
      name: dsh-sonarqube