Questions tagged [sonarqube]
SonarQube is the open source platform, to continuously inspect code quality of applications. It allows developers to detect bugs and vulnerabilities as well as to decrease code smells or bad practices, in more than 20 different languages.
11,250
questions
0votes
0answers
17views
Gitlab-ci rules don't trigger the pipeline again when I create the MR, but get source pipeline sonar results on MR page
I have some feature(side) branche. When I trigger the feature branch pipeline my pipeline running some multi stage (build, tests, sonar-scan). After all those development I would like to create MR to ...
- 59
2votes
0answers
33views
How to mask password in Python logs?
I am using a library python-sonarqube-api, which shows a password in debug logs using a logger which I consider a bug.
Until it can be fixed I need to hide the password in the logs. I am considering ...
- 1,563
0votes
0answers
20views
Sonarcube from JenkinsFile not able to get the customised pom.xml path to run sonar: sonar mvn command
I want to run the SonarCube report from my project from jenkinsfile. I am using below stage to run sonarcube report.
stage('SonarQube Code QualityCheck') {
steps {
bat '...
- 387
0votes
1answer
60views
Removing duplicate codes from if/else and try clause
Sonar has marked the below-mentioned code as duplicate, and I am not able to understand how to refactor the code as the fragments of the code exist in the if/else and try clause.
First Method:
private ...
- 329
0votes
1answer
21views
How to choose a specified profile to scan code
SonarQube:
Community Edition
Version 8.7.1 (build 42226
SonarScanner :4.7.0.2747
INFO: Java 11.0.14.1 Eclipse Adoptium (64-bit)
INFO: Windows 11 10.0 amd64
when i run sonar-scanner -Dsonar.projectKey=...
0votes
0answers
14views
Python cyclic import on sonar
I'm getting the following cyclic error:
Cyclic import (gyp.generator.ninja -> gyp.generator.xcode -> gyp.xcode_ninja)
Cyclic import (gyp.generator.msvs -> gyp.generator.ninja)
And I'm only ...
- 192
0votes
1answer
32views
Python - Reduce multiple elif who contains 2 conditions
I try to increase the quality of this code, because Sonarqube doesn't like when there is too much if/elif.
I tried to use "swich case"; but this function is too young for my production ...
- 1
0votes
1answer
19views
Why is CodeCoverage.exe producing near empty .coverage Files?
In our Jenkins pipeline, we use SonarQube to report on our code coverage. After running all of our unit/integration tests to produce the .coverage file, we need to analyze this file to create the &...
- 2,902
0votes
0answers
15views
container "sonarqube" in pod "sonar-574d99bfb5-dr8nx" is waiting to start: CreateContainerConfigError
i am facing a problem with my sonar i've been trying to set it up but i get this error from : kubectl logs sonar-574d99bfb5-dr8nx -n sonar == container "sonarqube" in pod "sonar-...
0votes
0answers
41views
Azure App Services Sonarqube With Azure SQL DB Issues
We deployed Azure App Service with docker as Sonarqube using portal and we are able to access the url.
After we created the projects if we will restart/stop & start Azure App Service, which ever I ...
- 11
0votes
0answers
13views
Maven surefire sonar:sonar skip failed test for multicomponent repo
Could you please help with correct params for skipping failed test in mvn sonar:sonar for multicompoment repo in GitLap?
maven-surfire plugin version is 2.4.2
I tried to add below params, but job ...
- 23
0votes
0answers
7views
analyzing the GSon project with SonarQube produces 0.0% test coverage
I'm trying to analyze the official GSon project downloaded from GitHub using SonarQube running on Docker even though all the tests are run successfully and the analysis is complete it show 0.0% test ...
0votes
0answers
9views
After resetting the sonarqube admin password, I am still unable to login as admin despited password being updated in the database
I have a sonarqube instance running in a Kubernetes cluster, connected to postgres rds database. I'm trying to reset the admin password after Keycloak realm change disabled OIDC authentication and now ...
- 77
0votes
0answers
15views
How to create a custom quality profile for Sonarqube filtered by elements such as: tags, categories,severity
I want to create a Sonarqube quality profile based on security "parameters" such as:
tags (cert, cwe, owasp-a1, owasp-a2...)
Security Category (weak cryptography, SQL injection) ...
...
i....
- 510
0votes
0answers
15views
How to integrate sonar-scan in ballerina based applications?
I am using many repositories and in case of npm modules i can integrate sonar easily,however I also want to scan with sonar in my ballerina based modules.How do I set up the work flow?
I tried ...
