sonarqube

How to configure FxCop in SonarQube 6.2

可紊 提交于 2019-12-11 07:28:50
问题 I am having hard time while trying to configure FxCop with SonarQube 6.2 along with TFS Continuous Integration Build 2015. I could able to successfully configure TFS build definition with SonarQube 6.2 and it is running perfectly fine but couldn't able to integrate FxCop into it. I couldn't able to find any plugin for FxCop in the SonarQube website and also, most of the viable solutions available in the internet for FxCop integration with SonarQube along with TFS Build definition are

StashIssueReportingPostJob not enabled - how to enable?

送分小仙女□ 提交于 2019-12-11 07:06:50
问题 using the AmadeusIT sonar-stash plugin... After branching from main for feature/sprint we updated code locally and added, committed and pushed to BitBucket, creating a pull request. We'd like to run a scan and see the issues presently only for the code we just issued a PR for... I run sonar-scanner with this invocation: sonar-scanner -Dsonar.analysis.mode=preview -Dsonar.stash.pullrequest.id=8 - Dsonar.stash.repository=StaticAnalysisPOC -Dsonar.stash.login=myLogin - Dsonar.stash.password

Sonarqube false positive for “Use try-with-resources or close this ”ResultSet“ in a ”finally“ clause”

孤人 提交于 2019-12-11 06:55:18
问题 Sonarqube keeps marking code with this issue which is, in my opinion, a false positive. Code looks like this: try(PreparedStatement st=con.prepareStatement(myQuery)){ st.setInt(1, myValue); ... ResultSet rs = st.executeQuery(); ... } If I'm not mistaken, the PreparedStatement implements Closeable and, when closing itself, it also closes the underlying ResultSet. This behaviour would prevent the ResultSet from being kept open, yet Sonarqube analysis marks it as a critical error. Am I mistaken?

sonar-maven-plugin: Can not set sonar.sources src/main/resources

梦想与她 提交于 2019-12-11 06:45:40
问题 I have a problem with maven-sonar settings. I need to include all my project files at src/main/java and src/main/resources so that SonarQube will show results of all my files but exclude some files in src/main/resources/static/file . For test path it is already set by default at src/test/java This is How i set my POM.XML <parent> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-parent</artifactId> <version>1.4.1.RELEASE</version> <relativePath /> <!-- lookup parent

Using SonarQube to distribute checkstyle for multiple projects including Suppressions for eclipse

廉价感情. 提交于 2019-12-11 06:44:45
问题 We want to use Sonar as distributor for our checkstyle configuration. This is easy with Sonar's permalinks. The problem are the suppressions. If we add the suppressions global at GeneralSettings → Java → Checkstyle like: <module name="SuppressionFilter"> <property name="file" value="someFolder/suppressed_checks.xml"/> </module> there will be the same suppressions configuration for every checkstyle configuration via the permalink. If we add the SuppressionFilter module only for the checkstyle

Lcov report from Karma is not getting uploaded into sonar

假装没事ソ 提交于 2019-12-11 06:36:27
问题 I am trying to publish lcov reports from karma to sonar, the report is getting generated in jenkins but its not getting uploaded into sonar. Our's is a angularJS maven project. Already sonar is analysing junit testing now I'm trying to analysize javascript using karma but ist not happening. I tried adding Kindly let me know if I am missing something.... #Karma reports sonar.javascript.jstestdriver.reportsPath=reports/ sonar.javascript.lcov.reportPath=src/main/webapp/coverage/lcov.info 来源:

Sonar category of TODO warnings

こ雲淡風輕ζ 提交于 2019-12-11 06:26:31
问题 In my code I have different types of TODO items: Some are meant to be like "this totally needs to be done" Others are more like "if you ever feel bored, why not add this?" An example for this would be in my IntelliJ-Plugin: there is a refresh method in a VirtualFileSystem which would be kinda user friendly to be implemented eventually, but everything works perfectly fine even without it, so it is more like a // NICETOHAVE: and not a // TODO: . I like to add comments like that to the code but

How do I get SonarQube to count spock/groovy unit tests?

孤街浪徒 提交于 2019-12-11 06:25:35
问题 I am trying to configure SonarQube to report an accurate count of the unit test cases in my repository, currently it is only showing the java jUnit test cases. SonarQube reports the java jUnit test count as well as the overall coverage from jacoco which includes both java and groovy coverage. How do I get SonarQube to recognize the groovy/spock unit tests in the overall count? SonarQube 7.7 (I see the issue on 7.4 as well) I am not sure if there is a specific sonar property I need to set in

NDepend SonarQube integration generates java.lang.NullPointerException

一个人想着一个人 提交于 2019-12-11 06:23:29
问题 When trying to integrate NDepend into SonarQube, a NullPointerException is generated saying that "The property "sonar.cs.ndepend.projectPath" must be set (to an absolute path)" I followed the instructions but right now I'm at a loss. Any ideas, anyone? NDepend version: 6.3.0 Professional SonarQube version: 6.0 Full exception stacktrace: ERROR: Error during SonarQube Scanner execution java.lang.NullPointerException: The property "sonar.cs.ndepend.projectPath" must be set (to an absolute path).

Errot while Integrating Sonarqube with LDAP

三世轮回 提交于 2019-12-11 06:02:21
问题 sonar.security.realm=LDAP ldap.url=ldap://ldap-company.com ldap.bindDn=CN=xxxxx,OU=Restricted,OU=xxxx,DC=company,DC=com ldap.bindPassword=none # User Configuration ldap.user.baseDn=ou=Users,dc=mycompany,dc=com ldap.user.request=(&(objectClass=inetOrgPerson)(uid={login})) ldap.user.realNameAttribute=cn ldap.user.emailAttribute=mail # Group Configuration ldap.group.baseDn=OU=Groups,OU=companyname,DC=comapany,DC=com ldap.group.request=(&(objectClass=posixGroup)(memberUid={uid})) These are my