16 May 2026
Integrating SonarQube (via SonarCloud) into a GitHub Actions pipeline: the quirks that ate two hours (host-URL validation, version-specific scanner behavior, global-tool install issues), the fix (pinning an older SonarScanner for .NET), and how easy Dependabot + CodeQL were by comparison.