I know that sonar can report back by adding a comment to the issue (very similar way the FlinkBot does) and can block the merge (probably using check runs api [1]), if some quality gate fails. I was never setting it up, so I'd need to take a closer look. This is a feature set we were using on GH in the past.
[1] https://docs.github.com/en/rest/reference/checks#runs D. On Thu, Jul 15, 2021 at 8:49 AM Robert Metzger <rmetz...@apache.org> wrote: > > > > Maybe we could leverage sonar cloud infrastructure for this. They already > > have built in rules for deprecation warnings [1]. Also they have a free > > offering for public open-source repositories [2]. > > > > Cool, I didn't know this. There are already quite a lot of Apache Projects > there: https://sonarcloud.io/organizations/apache/projects, and INFRA > seems > to be very open to adding more projects: > https://issues.apache.org/jira/browse/INFRA-19555 > > Do you know if GH PR integration is also available? (so that it shows a > warning in the PR if inspections on the change trigger) >
