Skip to main content
1,489 questions
Newest Active Bountied Unanswered
Filter by
Sorted by
Tagged with
0 votes
0 answers
42 views

I am trying to scan my source code present in BitBucket with SonarQube through my Bamboo pipeline. I am using the out-of-box module present in Bamboo for checkout. Problem: The checkout is not ...
NutsAndBolts's user avatar
  • 427
0 votes
1 answer
70 views

With the entered code here, I am trying to build a project on springboot. I am using AES encryption in my project. I am keeping the password(key) of AES in the application properties. The variable ...
user31911891's user avatar
  • 1
0 votes
0 answers
56 views

have a correct method to remove unique method or line from check coverage sonar? like //NOSONAR? I've tried but I wouldn't like to have to use sonar.exclusions= in my sonar-project.properties file
Bruno Barbosa's user avatar
  • 57
0 votes
1 answer
112 views

I’m currently running SonarQube code analysis through Jenkins as part of my CI pipeline. In the Jenkins pipeline, I’m passing the SonarQube project name, project key, and authentication token to ...
KUSHAL MUDDANA's user avatar
  • 1
1 vote
0 answers
104 views

According to the Sonar Cloud Documentation it is possible to use wildcards in the sonar.javascript.lcov.reportPaths following the Test Coverage parameters guideline for wildcards. However, when trying ...
Hans's user avatar
  • 241
0 votes
0 answers
41 views

I’m working with a custom Quality Profile for the Natural language in SonarQube. so even after deploying the latest version of the plugin on the quality default profile its showing “Sonar way (...
Dushyant Aneja's user avatar
  • 9
0 votes
0 answers
35 views

In a pipeline (Jenkins Version 2.496) script block; I have an environment params variable defined with 4 & to pass multiple values; SET tools_params=mainBranch=%default_branch%^&...
Kurt's user avatar
  • 161
0 votes
0 answers
44 views

I have the following update_sonar job in my CI pipeline: stage: update_sonar allow_failure: false image: sonarscanner:4.7-n14 tags: - "ocp_l" script: - sonar-scanner -...
Jouline's user avatar
  • 90
0 votes
0 answers
95 views

We recently upgraded our codebase from Java 17 to Java 21. During our Maven build, we use the following Azure pipeline tasks to run SonarQube: - task: SonarQubePrepare@7 inputs: SonarQube: '...
Splioo's user avatar
  • 602
0 votes
0 answers
120 views

I try to set up a simple CI pipeline in gitlab with sonarqube. I don't know how I can start the sonarqube server inside the CI pipeline and access it. I tried the following CI pipeline: image: ...
Franziska's user avatar
  • 1
0 votes
1 answer
107 views

I am running a Jenkins a multibranch pipeline with SonarQube scanner. It looks like the scanner requires target branch of the PR to be fetched in order to run the analysis but Jenkins is only fetching ...
Pepria's user avatar
  • 406
0 votes
0 answers
36 views

How can I analyze a PHP project that doesn’t have a “Build” stage? I have the following pipeline: trigger: branches: include: - '*' pool: vmImage: 'ubuntu-latest' variables: # Sonar-...
Leonardo's user avatar
  • 11.5k
0 votes
1 answer
296 views

I'm trying to integrate SonarQube scanner into a TeamCity build configuration. I have installed the Sonar Runner plugin and set the build step to use scanner version 4.2.0, and run a build with the ...
spikey_richie's user avatar
  • 506
0 votes
0 answers
103 views

I am working on a custom SonarQube plugin for a programming language that are not supported by the conventional sonar plugin. My current task is to implement a feature where lines containing a ...
Dushyant Aneja's user avatar
  • 9
1 vote
0 answers
94 views

I need to know how I can find the JARs without the vulnerabilities. I have an application, lets say, service A, now when I build this application, Sonar points to the list of vulnerabilities and ...
user641887's user avatar
  • 1,596
4 votes
1 answer
669 views

When I open a PR on GitHub, SonarQube Cloud checks the source code and reports any problems. I also have the IntelliJ plugin "SonarQube for IDE" installed. By connecting the IDE plugin to ...
Dónal's user avatar
  • 188k
0 votes
1 answer
75 views

SonarQube scanner tekton task https://hub.tekton.dev/tekton/task/sonarqube-scanner in default configuration is throwing following exception while scanning project in Go: step-sonar-scan INFO: Scanner ...
Gas's user avatar
  • 18.2k
0 votes
1 answer
161 views

I would like to run sonarqube scan on Synapse notebooks in Azure DevOps. In our Synapse notebooks, we have python, Pyspark, SQL and R codes. Our objective is to scan for vulnerabilities, code smells, ...
RSK's user avatar
  • 765
-2 votes
1 answer
138 views

Any alternative for logging.config.dictConfig(config) ? I can't bypass SonarQube quality gate due to the following SonarQube error : logging.config.dictConfig(config) : Make sure that this logger's ...
Legna's user avatar
  • 151
2 votes
1 answer
887 views

I am using our enterprise SonarQube server and doing PR decoration using GitHub Actions. The scan and PR analysis happens fine and in the end I get the GitHub comment on PR analysis, however I do not ...
user1697113's user avatar
  • 730
0 votes
2 answers
108 views

I've got a Github Action that runs SonarQube scanner: - name: SonarQube analysis continue-on-error: true shell: bash run: | sonar-scanner \ -Dsonar.cfamily.build-wrapper-output=bw-...
parsley72's user avatar
  • 9,317
3 votes
0 answers
122 views

I have SonarQube running on my builds to detect missing code coverage. My .NET 8 code has a try/catch/finally block. In the Try block I connect to a FTP server using an FTP client and in the Finally ...
g0np's user avatar
  • 349
0 votes
0 answers
121 views

We have Dot Net project and we are using SonarQube to check for Code quality. Recently we did modification in azure-pipelines.yml did version update . While raising PR now SonarQube is showing ...
Dashang G. Makwana's user avatar
  • 387
0 votes
1 answer
189 views

Currently I am working on a project that wants to integrate automated static analysis as a part of a pipeline. I simply want to just feed in a piece of code to sonarqube and have it output the results,...
mingzxy's user avatar
  • 1
0 votes
0 answers
234 views

I’m facing an issue with SonarQube where a blocker bug is still reported on the dashboard for a branch I'm working on, even though the issue has been fixed in the code and it works fine in my local ...
Sameh's user avatar
  • 86
0 votes
0 answers
310 views

I am using SonarSource/sonarqube-scan-action in a GitHub Actions workflow, following the documentation, to analyze a TypeScript project, which has Jest. My workflow has this block: name: Build & ...
Christian Benseler's user avatar
  • 8,083
0 votes
0 answers
314 views

Am analysing two projects in SonarQube. I am using SonarQube Community Edition with Jenkins pipelines for two projects, and I’ve encountered an issue regarding the quality gate status. Here’s a ...
Geo Joseph's user avatar
  • 65
0 votes
1 answer
361 views

I'm experiencing a strange behavior in SonarQube with two long-standing projects, Project A and Project B. Both projects have existed for a while across different products, but I'm noticing a ...
Geo Joseph's user avatar
  • 65
0 votes
1 answer
331 views

We are trying to run Sonar scan with latest ADO task version v6 and it is failing with the following error. Sonar scan works with ADO task version v5. /azp/_work/_tasks/SonarQubeAnalyze_6d01813a-9589-...
vidyak's user avatar
  • 183
1 vote
0 answers
132 views

I am trying to use SonarScanner on some Delphi 10.3 applications. I am using the sonar-delphi plugin to perform the analysis. It worked perfectly on small applications, but in more complex ...
Crispim14's user avatar
  • 11
0 votes
1 answer
243 views

Recently we have updated sonarscanner image During sonar app stage, facing this npm not found issue npm: command not found My sonar-app stage is like sonar-app: <<: *tpl_build_gcp stage: ...
web_in's user avatar
  • 125
0 votes
1 answer
330 views

I have a project that is structured like this: - 3rdParty_Lib1 - 3rdParty_Lib2 - Project_Root --- apps/ --- include/ ------ project_headers/ ------ boost_headers/ --- src/ ------- module1/ ------- ...
doa4321's user avatar
  • 206
1 vote
0 answers
320 views

I'm newbie in testing and received a notification from SonarCloud telling me that my DTO do not have any coverage, as it's just a class (a set of classes) I use for deserializing json I'm completely ...
wutangcodeclan's user avatar
  • 11
-1 votes
1 answer
103 views

SonarQube: Developer Edition v10.5.1 (90531) sonarqube-scanner version: 4.0.0 or 4.0.1 Used npm package: https://www.npmjs.com/package/sonarqube-scanner Node.js 20.14 When we run it as npx sonarqube-...
borN_free's user avatar
  • 1,532
0 votes
1 answer
3k views

I am working on a Dev Azure pipeline which is runnig couple of stages which have tasks for preparing sonar report. The important parts of stages which I want to focus on look like: ...
fascynacja's user avatar
  • 3,196
0 votes
0 answers
112 views

I’m learning how to integrate SonarCloud with Github Actions in a personal project. The Github repository that I am using can be accessed by clicking here. The solution I am developing was created ...
lruizd's user avatar
  • 21
1 vote
1 answer
588 views

I have a Azure Devos Pipeline, which in one of the stages is running Sonar report. After runnig the Pipeline summary page looks like: I would like to include the Sonar report link on this first page ...
fascynacja's user avatar
  • 3,196
0 votes
1 answer
143 views

Having a Bitbucket pipeline that executes 2 steps: Runs Python tests and saves report artifacts in an XML file Runs SonarQube scanner with the above report file. If every test is ok, the SonarQube ...
Yak O'Poe's user avatar
  • 822
0 votes
2 answers
914 views

Project's specific JDK In some situations, you might have to analyze a project built with a different version of Java than the one executing the analysis. The most common case is to run the analysis ...
brucewayne's user avatar
  • 77
0 votes
2 answers
469 views

Here is the github action forkflow : - name: Start SonarQube container run: | docker run -d --name sonarqube -p 9000:9000 sonarqube:lts - name: Wait for SonarQube to be ready run: | ...
Rami DH's user avatar
  • 11
1 vote
0 answers
69 views

I am currently using SonarQube in the Jenkins pipeline for continuous code quality checks. However, I have noticed an issue where the SonarQube Quality Gate passes on the first scan even when it ...
LahiruG's user avatar
  • 11
3 votes
1 answer
4k views

I am running sonarcloud in my react code. my sample code is interface PRScoreObject { salesAmt?: any; // date-type is number target?: any; // date-type is number or object with key value pair ...
achu's user avatar
  • 807
0 votes
1 answer
262 views

I am running the command : mvn sonar:sonar -Dsonar.projectKey=project-key -Dsonar.projectName=project-name -Dsonar.host.url=http://my.sonarurl.com/ -Dsonar.login=mytoken in my environment I have: ...
Christian Aguirre's user avatar
  • 1
1 vote
0 answers
1k views

Below is jdk 17 having class version 61 as set in the Path: C:\Program Files\Java\jdk-17\bin>java -XshowSettings:properties -version Property settings: file.encoding = Cp1252 file.separator ...
Ashar's user avatar
  • 3,215
0 votes
1 answer
1k views

I'm using community edition of SonarQube on my Ubuntu machine and self-hosted agent in Azure DevOps. I tried to integrate SonarQube in the pipeline using 2 different codes but none seems to be working....
roteki's user avatar
  • 21
0 votes
0 answers
471 views

New to GitHub Actions, trying to set the pull request analysis with SONARQUBE. getting error- Trying to resolve the latest version from remote Error: getaddrinfo ENOTFOUND api.adoptium.net" ...
SeemaC's user avatar
  • 5
1 vote
0 answers
14 views

I'm trying to understand the following behaviour of SonarQube, which gets in the way of me using my own methods. Apache declares this function : package org.apache.commons.lang3; public class ...
jeancallisti's user avatar
  • 1,804
0 votes
1 answer
119 views

I'm not able to fix this Sonarqube issue related to SOQL Injection possible, this is original code, AggregateResultIterator class is called in Batch start method: global without sharing class ...
Diego Sanchez's user avatar
  • 1
0 votes
1 answer
346 views

I'm struggling to fix this Sonarqube issue related to avoid unescaped/sanitized content in output, this is original code: <aura:component implements="force:appHostable,force:hasRecordId,...
Diego Sanchez's user avatar
  • 1
0 votes
2 answers
143 views

I'm trying to get my s3 bucket working to store access logs. Below is how I'm deploying the required policy for it using terraform. resource "aws_s3_bucket_policy" "...
Rohit Patil's user avatar
  • 11

1
2 3 4 5
…
30