Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue displaying report #17

Closed
radmilabord opened this issue Apr 19, 2016 · 2 comments
Closed

Issue displaying report #17

radmilabord opened this issue Apr 19, 2016 · 2 comments

Comments

@radmilabord
Copy link

I'm having issues with displaying vulnerabilities on SonarQube. Here are the steps I followed:

  1. Installed dependency-check-sonar-plugin version 1.0.3 on SonarQube.
  2. Configured dashboard to include Vulnerabilities widjet.
  3. Generated dependency report using: mvn org.owasp:dependency-check-maven:1.3.6:check -Dformat=XML.
  4. Report was placed into [project]/target/dependency-check-report.xml
  5. Ran sonar task: org.codehaus.mojo:sonar-maven-plugin:2.3:sonar Task completed successfully but I don't see data in the Vulnerabilities widjet. Anyone has idea what could prevent plugin from seeing report?

Thanks in advance! Rada

@stevespringett
Copy link
Contributor

Did you take a look at the examples?

You may need to add:
<sonar.dependencyCheck.reportPath>${project.build.directory}/dependency-check-report.xml</sonar.dependencyCheck.reportPath>

@radmilabord
Copy link
Author

Steve, thank you so much!!! your input helped to tie report and sonar together and I'm seeing results!!!
I appreciate your help!!!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants