audit-labs/audit-tools

A collection of scripts, queries, and other goodies you can use in an audit.

clone: git clone https://gitbay.org/audit-labs/audit-tools.git

a7b95623e69c749f1826b261b775de74a21bc0e0

verified · cmc

author: Christian Cleberg <hello@cleberg.net> · 2026-07-29T04:29:12Z

chore: suppress S1172 on collectors via sonar-project.properties

The GitLab (and GitHub) collectors share a uniform (id, cfg, cache) signature
so the audit runner can dispatch every check identically; some collectors use
only part of it. Ignore python:S1172 (unused parameter) on the collector
packages rather than diverging their signatures.

Kept minimal for SonarCloud Automatic Analysis: no projectKey/organization,
which are bound by the GitHub integration.

 sonar-project.properties | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/sonar-project.properties b/sonar-project.properties
new file mode 100644
index 0000000..8f3f348
--- /dev/null
+++ b/sonar-project.properties
@@ -0,0 +1,15 @@
+# SonarCloud configuration (Automatic Analysis / Autoscan).
+#
+# projectKey and organization are intentionally omitted — they are bound
+# automatically by the GitHub integration, and setting them here can disable
+# Automatic Analysis.
+
+# Suppress python:S1172 (unused function parameter) on the collector packages.
+# Collectors share a uniform (id, cfg, cache) signature so the audit runner can
+# dispatch every check the same way. Some collectors legitimately use only part
+# of that signature — per-project collectors don't need the org/group, and the
+# pure formatter needs only the cache. This mirrors the existing GitHub
+# collectors (e.g. privileged_access, permission_matrix).
+sonar.issue.ignore.multicriteria=e1
+sonar.issue.ignore.multicriteria.e1.ruleKey=python:S1172
+sonar.issue.ignore.multicriteria.e1.resourcePath=applications/**/collectors/**/*.py