diff --git a/.sonarcloud.properties b/.sonarcloud.properties index 656bb9a..07b8109 100644 --- a/.sonarcloud.properties +++ b/.sonarcloud.properties @@ -1,12 +1,16 @@ # SonarQube Cloud analysis scope. # -# Analyse application source only. Build tooling (bin/) and CI workflow -# definitions (.github/) are development infrastructure: they are never -# shipped in the published wheel, so findings there fail the quality gate -# without describing any risk to users of this package. +# Analyse application source only. Tests, build tooling, documentation +# and CI workflow definitions are never shipped in the published +# package, so findings there fail the quality gate without describing +# any risk to users of this project. # -# Notably this excludes githubactions:S8541, which asks for `uv --no-build`. -# That flag cannot be used here: this project compiles Fortran extensions -# from source, and uv refuses with "can't be installed because it is marked -# as `--no-build` but has no binary distribution". -sonar.exclusions=.github/**,bin/** +# Every path listed below was verified to exist in this repository; +# directories this project does not have are deliberately omitted +# rather than carried over from a sibling repo. +# +# This also covers githubactions:S8541, which asks for uv's +# `--no-build`. That flag cannot be used by a project built from +# source: uv refuses with "can't be installed because it is marked as +# `--no-build` but has no binary distribution". +sonar.exclusions=.github/**,tests/**,bin/**,docs/**