SONARJAVA-5720 Unify Platform Dogfooding of sonar-java

[alban-auzeill]

SONARJAVA-5720

Execution without only_if: https://cirrus-ci.com/build/5598413170933760
Result:

• https://sonarcloud.io/summary/new_code?id=SonarSource_sonar-java&pullRequest=5297
• https://sonarqube.us/summary/new_code?id=SonarSource_sonar-java&pullRequest=5296

[sonarqubecloud]

🤖 Pull Request summary

This PR adds a shadow SonarQube scanning and issue replication pipeline to CI.

• Adds new CI task sonar_shadow_scan_and_issue_replication_task that runs matrix builds for sonarcloud.io and sonarqube.us
• Creates shell script to build/analyze project against shadow SonarQube instances and replicate issues using IRIS tool
• Updates promote task to depend on the new shadow scan task

Review focus: Verify vault token permissions and ensure the commented-out cron trigger condition is intentional before merge.

💬 Please send your feedback

Quality Gate failed

Failed conditions
449 New issues
2 Security Hotspots

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

[sonarqube-cloud-us]

🤖 Pull Request summary

Adds shadow scanning with issue replication to CI pipeline.

• New CI task: Adds sonar_shadow_scan_and_issue_replication_task that runs after build and targets both SonarCloud and SonarQube US instances
• Shell script: Implements shadow-scan-and-issue-replication.sh with build analysis and IRIS tool integration for issue state replication
• Pipeline dependency: Updates promote task to depend on the new shadow scan task

Focus areas for review:

• Credential management and vault token usage across multiple SonarQube instances
• IRIS jar download and execution logic with dry-run validation
• Commented TODO for cron job restriction may need addressing

💬 Please send your feedback

Quality Gate failed

Failed conditions
430 New issues
2 Security Hotspots

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube