Comments (9)
I've added SQ 10 to the integration tests and it seems to work just fine. See #725
The integration tests run the builds of some sample project and then check that the issues are reported in SonarQube.
I've just had to make some changes that only relate to the mocking of loggers for unit tests, that does not matter for the production code.
from sonar-findbugs.
Hello @reitzmichnicht
I hope it's OK to ping you here since I saw your message in the SonarQube release annoucement
Could it be that the plugins need to be installed again? Anything interesting in the logs?
from sonar-findbugs.
We always build a fresh docker image, but it looks like that the plugins are not recognized anymore. I have to check the reason, maybe filesystem permissions issue.
from sonar-findbugs.
Hello @reitzmichnicht I hope it's OK to ping you here since I saw your message in the SonarQube release annoucement Could it be that the plugins need to be installed again? Anything interesting in the logs?
Except that the findbugs quality profiles are duplicated now (the new ones have the built-in badge) its working now since I fixed a small typo so that they are copied to the correct directory again.
from sonar-findbugs.
Thanks, so we can say that the plugin works with SonarQube 10!
from sonar-findbugs.
I have to revert my statement. Looks like that some (all?) findbug rules are now applied to main code AND test code. At least thats what we see. We have lots of new findings related to test code where those rules seem to be not applicable before.
from sonar-findbugs.
The analysis of tests is actually a feature and was added in #706
It only activates when running with SonarQube >= 9.8
I've added an option to exclude tests from the anlysis in #720 but it is not released at this point.
Does it make sense and do you need a release with that new option to disable the analysis of tests?
from sonar-findbugs.
New behavior is fine, just a remark in the release notes would be great :)
from sonar-findbugs.
Good point: the release note had the corresponding PR but it was not clear at all
Remark added!
from sonar-findbugs.
Related Issues (20)
- Cannot find pre compiled JSP with Branch Community Plugin HOT 6
- regarding usage of Apache commons-text library HOT 6
- Sonar scanning getting failed to scan the multiple languages due to Findbugs plugin HOT 5
- Apache Common Text library - vulnerability HOT 2
- Findbugs fails when JavaSensor uses cached data HOT 17
- OWASP Top 10 not listed HOT 1
- Findbugs is reporting false positive bugs in test code HOT 10
- sonarqube displays errors from a profile that is not assigned to the project HOT 2
- Crowd username changes - impact on sonar-findbbugs plugin HOT 2
- FindBug Rules are triggered for Quality PRofile Kotlin and XML HOT 2
- SonarQube Project showing an issue from a Java findbugs rule which is not there in the selected Quality Profile HOT 7
- SonarQube fails with Java 17 HOT 8
- Spike in SonarQube Findings HOT 2
- Support Java 21 (Unsupported class file major version 65) HOT 3
- Dependency Dashboard
- Findbugs timeout issue HOT 6
- new option to analyze tests HOT 2
- Update PAT_TO_FORK HOT 6
- Findbugs is reporting false positive bugs SA_LOCAL_SELF_COMPARISON when using instanceof pattern matching HOT 13
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sonar-findbugs.