Code scanning with Sonarqube

OpenSextant / Xponents

Geographic Place, Date/time, and Pattern entity extraction toolkit along with text extraction from unstructured data and GIS outputters.

Apache License 2.0

44 stars 7 forks source link

Code scanning with Sonarqube #63

Closed mubaldino closed 3 years ago

mubaldino commented 3 years ago

Type of Feature:

[ ] Collaboration or partnership
[x] Improvement or clarification
[ ] New Processing

Description of Feature Integrate Sonar code scanning as an option to pre-screen releases. Deploy and package Sonar scan with offline docker image, given it nearly doubles the maven dependencies.

mubaldino commented 3 years ago

Findings:

Maven plugin dependencies were underspecified
Unit tests need substantial correction -- use of assertEquals and order of tests, and lack of assertions throughout.

mubaldino commented 3 years ago

See sonarqube usage with Docker ./Examples/Docker/ contains README covering how to operate sonar scanning.