-
Notifications
You must be signed in to change notification settings - Fork 145
Description
Describe the bug
The result of the OWASP Dependency-Check plugin for a branch is not displayed in Sonar.
Versions:
dependency-check 5.3.2
docker.io/sonarqube:8.2-enterprise version
To Reproduce
Steps to reproduce the behavior:
- Install Sonar
- Install dependency-check plugin in Jenkins
- Configure dependency-check plugin among Jenkins tools
- Clone benchmark project: https://github.com/OWASP/Benchmark
- Create branch
- Implement pipeline with the the following steps: dependencyCheck additionalArguments: '--format XML --out dependency-check-report.xml', odcInstallation: '5.3.2' and dependencyCheckPublisher pattern: 'dependency-check-report.xml'
- Open project in Sonar
- The dependency check report is not shown
Current behavior
The report is generated correctly. Based on the Jenkins log the HTML report is published, but the report is not displayed in Sonar.
Expected behavior
The dependency check report should be displayed as in case of master.
Screenshots
See the screenshots about the Jenkins log and the Sonar screen.


Versions (please complete the following information):
- sonarqube: docker.io/sonarqube:8.2-enterprise version
- Jenkins OWASP Dependency-Check Plugin 5.3.2
- Sonar Dependency-Check plugin 2.0.4
Additional context
The result of the dependency check of the master is published and displayed correctly with the same Jenkins pipeline code, so the problem exists with the branches only.