.sonarcloud.properties

#
# GitHub Actions and generated database SQL files create noisy findings in
# Sonar. Keep workflow analysis disabled and leave PostgreSQL validation to
# SQLFluff, migrations, and database tests.
sonar.githubactions.activate=false

sonar.exclusions=.github/workflows/**,.github/scripts/**,cli/**,scripts/**,tests/**,scriptable/**,.cursor/**,playwright/**,formkit.theme.ts,sql/**,read_replicate/schema_replicate.sql,supabase/seed.sql,supabase/tests/**,supabase/schemas/**,supabase/migrations/**,src/components/comp_def.ts,supabase/functions/_backend/utils/supabase.types.ts,supabase/functions/_backend/plugin_runtime/utils/supabase.types.ts,src/types/supabase.types.ts,packages/capacitor-notifications/android/src/main/AndroidManifest.xml,**/packages/capacitor-notifications/android/src/main/AndroidManifest.xml,packages/capacitor-notifications/android/build.gradle
# plugin_runtime is an intentional isolate copy of former shared utils so plugin
# hot paths never import API code; CPD noise from that split is expected.
sonar.cpd.exclusions=.github/workflows/**,.github/scripts/**,cli/**,scripts/**,tests/**,scriptable/**,.cursor/**,playwright/**,formkit.theme.ts,sql/**,supabase/seed.sql,supabase/migrations/**,supabase/functions/_backend/utils/conversion.ts,supabase/tests/**,supabase/functions/_backend/plugins/updates_lite.ts,supabase/functions/_backend/utils/pg_lite.ts,supabase/functions/_backend/utils/supabase.types.ts,supabase/functions/_backend/plugin_runtime/**,src/types/supabase.types.ts,src/components/comp_def.ts,src/services/conversion.ts


# The Android shell is generated by Capacitor; dependency versions are pinned by
# package and Gradle configuration, while the generated native graph is rebuilt
# during mobile CI. The notification package manifest is an Android library
# manifest; host apps own their backup and data-extraction policy.
sonar.issue.ignore.multicriteria=e1,notificationAndroidLibraryBackup,notificationPluginGradleLock
sonar.issue.ignore.multicriteria.e1.ruleKey=text:S8569
sonar.issue.ignore.multicriteria.e1.resourceKey=android/build.gradle
sonar.issue.ignore.multicriteria.notificationPluginGradleLock.ruleKey=text:S8569
sonar.issue.ignore.multicriteria.notificationPluginGradleLock.resourceKey=packages/capacitor-notifications/android/build.gradle
sonar.issue.ignore.multicriteria.notificationAndroidLibraryBackup.ruleKey=xml:S6358
sonar.issue.ignore.multicriteria.notificationAndroidLibraryBackup.resourceKey=packages/capacitor-notifications/android/src/main/AndroidManifest.xml