Skip to content

Dependency check result for a branch is not displayed in Sonar #260

@ahorvath23

Description

@ahorvath23

Describe the bug
The result of the OWASP Dependency-Check plugin for a branch is not displayed in Sonar.

Versions:
dependency-check 5.3.2
docker.io/sonarqube:8.2-enterprise version

To Reproduce
Steps to reproduce the behavior:

  1. Install Sonar
  2. Install dependency-check plugin in Jenkins
  3. Configure dependency-check plugin among Jenkins tools
  4. Clone benchmark project: https://github.com/OWASP/Benchmark
  5. Create branch
  6. Implement pipeline with the the following steps: dependencyCheck additionalArguments: '--format XML --out dependency-check-report.xml', odcInstallation: '5.3.2' and dependencyCheckPublisher pattern: 'dependency-check-report.xml'
  7. Open project in Sonar
  8. The dependency check report is not shown

Current behavior
The report is generated correctly. Based on the Jenkins log the HTML report is published, but the report is not displayed in Sonar.

Expected behavior
The dependency check report should be displayed as in case of master.

Screenshots
See the screenshots about the Jenkins log and the Sonar screen.
Jenkins-log
Sonar_branch
Sonar_master

Versions (please complete the following information):

  • sonarqube: docker.io/sonarqube:8.2-enterprise version
  • Jenkins OWASP Dependency-Check Plugin 5.3.2
  • Sonar Dependency-Check plugin 2.0.4

Additional context
The result of the dependency check of the master is published and displayed correctly with the same Jenkins pipeline code, so the problem exists with the branches only.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions