MobSF / mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
GNU Lesser General Public License v3.0
607 stars 97 forks source link

Make mandatory field "filePath" not nullable for sonarqube output #73

Closed krazzbeluh closed 11 months ago

krazzbeluh commented 11 months ago

Hi! I'm recreating an old PR because I'm integrating mobsfscan to my projects and sending the reports to sonarqube.

The issue is that the resulting report is created with nullable filePath field which should not be nullable : java.lang.IllegalStateException: Failed to parse report '/path/to/report.json': missing mandatory field 'filePath' in the primary location of the issue.

Using an empty filePath works just fine.