[tomshafir-sonarsource]

Separate SQAA request preparation from execution so callers can fingerprint each destination and payload, then analyze those exact inputs. Preserve project grouping, validation, 503 retries, and oversized-request splitting without rereading files during execution.

Remove the obsolete combined entry points and migrate their tests to explicit preparation and execution.

Validation:

• Type checking, Prettier, and ESLint pass.
• All 45 analyze unit spec files and both selected hook integration spec files pass.
• Installed CLI checks pass for single-file DEEP analysis, 503 retries, 413 splitting, and invalid inputs in isolated projects.
• Mutation testing confirms the snapshot regression test catches incorrect 413 split contents.

Local validation limits: the full unit run has one Java fixture failure, and combined secrets/SQAA integration cases stop before SQAA because the Java secrets scanner cannot establish a loopback connection. The repository DEEP analysis check fails with ECONNREFUSED.

[netlify]

✅ Deploy Preview for sonarqube-cli canceled.

Name	Link
🔨 Latest commit	a80d696
🔍 Latest deploy log	https://app.netlify.com/projects/sonarqube-cli/deploys/6af32694382359abb24cc2c2

[hashicorp-vault-sonar-prod]

CLI-1470

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Separating SQAA request preparation from execution snapshots file contents earlier, so analysis may use stale inputs if files change before execution.

Separates SQAA request preparation from execution so each destination and payload can be fingerprinted and analyzed as-is, preserving project grouping, validation, 503 retries, and 413 splitting without rereading files. No issues found.

Verification Rules 2/2 met PRs 2 inspected

Functional validation No results

Rules 2 passed 2 not applicable

✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 2 inspected

Cross-PR 2 PRs inspected 0 open impacts

PR 1191: Remove sequential awaits in loops and split oversized architecture files Inspected
PR 1228: CLI-1345 Record one telemetry event per target project Inspected

Auto-approval Withheld

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqubecloud]

Quality Gate failed

Failed conditions
3 New issues

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE