Skip to content

Support dependency check 8.0.0 #748

@sellersj

Description

@sellersj

Describe the bug
When moving from 7.4.4 to 8.0.0, the plugin does not seem to be able to report the json or xml file

To Reproduce
After running the check task, then running sonar:sonar -Dsonar.dependencyCheck.jsonReportPath=./target/dependency-check-report.json -Dsonar.dependencyCheck.htmlReportPath=./target/dependency-check-report.html

Current behavior
It prints errors and does not import the issues into sonarqube. It does import the html file okay.

[INFO] Sensor Dependency-Check [dependencycheck]
[INFO] Process Dependency-Check report
[INFO] Using JSON-Reportparser
[WARNING] JSON-Analysis aborted
[INFO] Using XML-Reportparser
[INFO] Dependency-Check XML report does not exists. Please check property sonar.dependencyCheck.xmlReportPath:/local-working-dir/MYPROJECT-SITE-JOB1/${WORKSPACE}/dependency-check-report.xml
[INFO] XML-Analysis skipped/aborted due to missing report file
[INFO] Upload Dependency-Check HTML-Report
[INFO] Process Dependency-Check report (done) | time=391ms
[INFO] Sensor Dependency-Check [dependencycheck] (done) | time=391ms

Expected behavior
Expect it same behaviour as 7.4.4 with importing the issues

Screenshots
If applicable, add screenshots to help explain your problem.

Versions (please complete the following information):

  • dependency-check 8.0.0
  • sonarqube 8.9.10
  • dependency-check-sonar-plugin 3.0.1

Additional context
none

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions