Quotes around secrets in merge step.

.gitea/workflows/build.yaml

@@ -104,7 +104,7 @@ jobs:
       
       - name: Merge PR with Tea CLI
         run: |
-          tea pr m --token ${{ secrets.BOT_GITEA_TOKEN }} ${{ gitea.event.pull_request.number }}
+          tea pr m --token "${{ secrets.BOT_GITEA_TOKEN }}" "${{ gitea.event.pull_request.number }}"
 
   #     - name: Merge Pull Request
   #       uses: prasiman/gocurl@v1

sonar-project.properties

@@ -8,11 +8,11 @@ sonar.inclusions=docker-compose.yml
 
 # Disable all other sensors explicitly
 sonar.iac.enabled=true
+sonar.iac.inclusions=**/*.yml,**/*.yaml,**/docker-compose.yml
 sonar.iac.exclusions=**/*.* # Exclude everything not explicitly included
 sonar.exclusions=**/*.*
 
 # Explicitly include IaC file types (if required for broader IaC scanning)
-sonar.iac.inclusions=**/*.yml,**/*.yaml,**/docker-compose.yml
 
 # Optional: Wait for quality gate in pipelines
 sonar.qualitygate.wait=true