Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added sonarcloud scanner #344

Merged
merged 6 commits into from
Apr 19, 2022
Merged

Added sonarcloud scanner #344

merged 6 commits into from
Apr 19, 2022

Conversation

roxanne-tampus
Copy link
Contributor

No description provided.

}

if verify {
req, err := http.NewRequestWithContext(ctx, "GET", "https://"+resMatch+"@sonarcloud.io/api/users/search", nil)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like there's a validation endpoint: https://sonarcloud.io/web_api/api/authentication?deprecated=false

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the credential that we are testing with as-is from sonarcloud? I'm asking because most have to be base64 encoded before they can be used with basic auth.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, the credential is generated in sonarcloud. It is located under My Account->Security. I just updated the endpoint and added organization as parameter since it seems validation endpoint still returns true even without token or credentials.
image

@dustin-decker dustin-decker merged commit e584280 into trufflesecurity:main Apr 19, 2022
bill-rich pushed a commit that referenced this pull request May 2, 2022
* added new protos

* added sonarcloud scanner

* Updated sonarcloud scanner

* updated sonarcloud endpoint
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants