search

IBM / sonar-cryptography

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.
Apache License 2.0
16 stars 0 forks source link

Support for Java 11 #28

Open juergenwohlwend opened 1 week ago

juergenwohlwend commented 1 week ago

After installation we received the following error during the Scanning Process:

org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'org.sonarsource.scanner.api.internal.IsolatedClassloader@67f639d3-org.sonar.scanner.bootstrap.ScannerPluginRepository': Initialization of bean failed; nested exception is java.lang.IllegalStateException: The plugin [crypto] does not support Java 11.0.20
[60](https://gitlab.lgt.com/psb/sb-frontend-dev/-/jobs/17551597#L60)
n1ckl0sk0rtge commented 1 week ago

Hi @juergenwohlwend, thanks for reporting. Did you use jre11 version of the plugin? https://github.com/IBM/sonar-cryptography/releases/download/1.1.3/sonar-cryptography-plugin-1.1.3-jre11.jar

juergenwohlwend commented 1 week ago

@n1ckl0sk0rtge yes we used that Plugin

n1ckl0sk0rtge commented 1 week ago

@juergenwohlwend Okay, @hugoqnc will check and come back to you!

hugoqnc commented 1 week ago

Hi @juergenwohlwend, I made some tests but couldn't reproduce your issue yet. You are scanning a Java project that was built with Java 11, right?

Could you make sure that you follow the sonar instructions regarding scanning a project with a different Java version than the Java used for the analysis?

I suppose you are using SonarScanner CLI to start the scanning process, could you tell me on which platform and with which version are you using it? In particular, are you using the scanner "Any (Requires a pre-installed JVM)" with Java 11?

Thanks!