-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add parser for Sonarqube JSON result. #9366
Add parser for Sonarqube JSON result. #9366
Conversation
Contextual Security AnalysisAs DryRun Security performs checks, we’ll summarize them here. You can always dive into the detailed results in the section below for checks.
Chat with your AI-powered Security Buddy by typing Install and configure more repositories at DryRun Security |
6d8a87a
to
fa7c04b
Compare
@biennd279 Can you address the ruff linter issues so this can be approved and merged? |
I have just merged with the dev branch. I think that will be okay with #9364. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approved
Description
Sonar-report has JSON results. I think using JSON results from the sonar-report parser proves more stable than HTML.
I implemented the JSON Sonarqube result parser. I only parser of Issue (Vuln) and Rule from JSON, other logic i reuse from HTML result for sync result.
Test results
I added a unit test to find 0, 1, and many other findings. Other logic reuse from HTML result so i didn't add testcases.
Documentation
This parser working with options
--save-report-json
of sonar-report and have same behavior with HTML report.JSON format works well with sonar-report version >= 3.1.2.
Checklist
This checklist is for your information.
dev
.dev
.bugfix
branch.