[alban-auzeill]

SCANDOCKER-104

Configure sonarsource/gh-action-lt-backlog/PullRequestClosed with fix-version: autodetect-lowest, the same mechanism as SonarJS, so the Jira "Fix versions" field is set to the lowest unreleased version of the project when it is empty.

The value is only provided when:

• the pull request title starts with SCANDOCKER-, so tickets from other Jira projects are left untouched
• the pull request targets the default branch (github.event.repository.default_branch)

Otherwise the input is empty and the action does not change the fix version.

🤖 Generated with Claude Code

[hashicorp-vault-sonar-prod]

SCANDOCKER-104

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Adding conditional Jira fix-version automation could assign the wrong unreleased version to matching project tickets when a PR closes.

Configures the PullRequestClosed Jira action with fix-version: autodetect-lowest so the lowest unreleased version is set on SCANDOCKER tickets when the PR targets the default branch and the fix version is empty. No issues found.

Verification Rules 3/3 met Repos 1 inspected · PRs 1 inspected

Functional validation No results

Rules 3 passed

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Broader impact Repos 1 inspected PRs 1 inspected

Cross-repo 1 repository inspected 0 open impacts

SonarSource/gh-action-lt-backlog Inspected

Cross-PR 1 PR inspected 0 open impacts

PR 332: SCANCLI-271 Automatically set Jira fix version when a pull request is merged Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube