search

BCDevOps / sonarqube

An OpenShift-focused Docker build of Sonarqube
GNU Lesser General Public License v3.0
2 stars 33 forks source link

Zap Summary Report not showing up in SoranQube 7.9.1 #16

Open WadeBarnes opened 4 years ago

WadeBarnes commented 4 years ago

There appears to be an issue with the summary report not showing up that we'll have to address. You have to drill into the issues to see the results.

Refer to this link for details and examples: https://github.com/BCDevOps/sonarqube/pull/14#issuecomment-557917472

esune commented 4 years ago

I have tested a new jenkins-slave-zap that uses newer versions of the plugins and, unsurprisignly, it does not work with older versions of the Sonarube ZAP plugin.

We need to test this with the newer version and, if it works right, we will need to make sure the jenkins-slave-zap image is appropriately taged and versioned so that the right one can be picked depending on the version of sonarqube/zap being used in the pipeline.

esune commented 4 years ago

There appears to be an issue with the latest 7.9.x versions of SonarQube as described here.

Until then, ALL plugins will need to be installed manually when using the latest version of bcgovimages/sonarqube.

esune commented 4 years ago

I have tested executing a scan with an updated version of the jenkins-slave-zap and, unfortunately, the report doesn't seem to be displaying the stats in the projects homepage.

There is a discussion on the SonarQube forums that seems to highlight the same issue we're experiencing, although with different plugins/scanners.

The suggestions/solutions don't seem consistent and do not apply to our configuration as far as i can tell, I haven't anyway tried them all (at least yet) for lack of time.