SonarCloud: miscellaneous findings

[don-petry]

SonarCloud: miscellaneous findings

7 open SonarCloud finding(s) in petry-projects/markets, worst severity MAJOR. Generated by the org SonarCloud Audit.

View in SonarCloud →

Findings

Rule	Count	Representative message
azurepipelines:S6505	5	Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.
azurepipelines:S8543	2	Define exact package version to avoid installing unverified releases.

Affected files

• .github/skills/bmad-testarch-ci/azure-pipelines-template.yaml (7)

Priority

Labeled priority:major — mapped from this bucket's worst SonarCloud severity (MAJOR).

Acceptance

• All findings in this workstream resolved to zero in SonarCloud
• No behavior change; CI green
• Real fixes (no blanket NOSONAR unless a confirmed false positive, noted inline)

---

Idempotent issue — updated automatically each audit run; auto-closed when the finding count reaches zero.