Skip to content

WPB-23896: address SonarQube findings - #5332

Merged
blackheaven merged 1 commit into
developfrom
gdifolco/WPB-23896-sonarqube-high-medium-1
Jul 10, 2026
Merged

WPB-23896: address SonarQube findings#5332
blackheaven merged 1 commit into
developfrom
gdifolco/WPB-23896-sonarqube-high-medium-1

Conversation

@blackheaven

Copy link
Copy Markdown
Contributor

https://wearezeta.atlassian.net/browse/WPB-23896

Checklist

  • Add a new entry in an appropriate subdirectory of changelog.d
  • Read and follow the PR guidelines

- Add automountServiceAccountToken: false to 9 auxiliary/test Helm chart
  pods that don't need K8s API access (elasticsearch-ephemeral, calling-test,
  demo-smtp, backoffice, fake-aws-ses/sns/sqs, outlook-addin, openldap)
- Pin cachix/install-nix-action to full commit SHA (v16 ->
  d56f3ce9be45c562799280e8a561fbbe8f36de44)
- Add @functools.total_ordering to frozendict (S8500: missing comparison
  methods)
@blackheaven
blackheaven requested review from a team as code owners July 10, 2026 14:15
@zebot zebot added the ok-to-test Approved for running tests in CI, overrides not-ok-to-test if both labels exist label Jul 10, 2026

@battermann battermann left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Given automountServiceAccountToken=false is what we want (I am not familiar with it) it looks all good to me.

@blackheaven

Copy link
Copy Markdown
Contributor Author

automountServiceAccountToken=false means we don't use k8s API

I may be wrong, but we do not use it in our code generally

@battermann

Copy link
Copy Markdown
Contributor

automountServiceAccountToken=false means we don't use k8s API

I may be wrong, but we do not use it in our code generally

Yeah, makes sense.

@blackheaven
blackheaven merged commit 81dc949 into develop Jul 10, 2026
10 checks passed
@blackheaven
blackheaven deleted the gdifolco/WPB-23896-sonarqube-high-medium-1 branch July 10, 2026 15:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ok-to-test Approved for running tests in CI, overrides not-ok-to-test if both labels exist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants