From e40dbb50c763c5a586c876980aabd665b13b7393 Mon Sep 17 00:00:00 2001
From: Arjun <agadiyar@nvidia.com>
Date: Mon, 23 Mar 2026 16:32:41 +0000
Subject: [PATCH] Add update-sonarqube job

Signed-off-by: Arjun <agadiyar@nvidia.com>
---
 .gitignore     |  1 +
 .nvidia-ci.yml | 19 +++++++++++++++++++
 2 files changed, 20 insertions(+)

diff --git a/.gitignore b/.gitignore
index d4904d444..4c730bdf2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,6 +26,7 @@ testbin/*
 *~
 *.DS_Store
 .vscode
+.scannerwork/
 
 # Credentials and runtime environment
 kubeconfig
diff --git a/.nvidia-ci.yml b/.nvidia-ci.yml
index 040c897bb..f698299dc 100644
--- a/.nvidia-ci.yml
+++ b/.nvidia-ci.yml
@@ -162,6 +162,25 @@ update-nspect:
     NSPECT_CLIENT_ID: "${NSPECT_PROD_CLIENT_ID}" 
     NSPECT_CLIENT_SECRET: "${NSPECT_PROD_CLIENT_SECRET}"
 
+update-sonarqube:
+  stage: ngc-publish
+  needs:
+    - job: update-nspect
+      optional: true
+    - job: update-nspect-staging
+      optional: true
+  image:
+    name: sonarsource/sonar-scanner-cli:11
+    entrypoint: [""]
+  variables:
+    SONAR_USER_HOME: "${CI_PROJECT_DIR}/.sonar"
+    GIT_DEPTH: "0"
+  rules:
+    - if: $CI_COMMIT_BRANCH == 'main'
+  allow_failure: true
+  script:
+    - sonar-scanner -Dsonar.host.url="${SONAR_HOST_URL}" -Dsonar.projectKey=gpu-operator -Dsonar.projectName=gpu-operator -Dsonar.sources=.
+
 .publish-images:
   stage: ngc-publish
   extends: