issues
search
dependency-check
/
dependency-check-sonar-plugin
Integrates Dependency-Check reports into SonarQube
585
stars
133
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Bump @babel/core from 7.21.0 to 7.23.6 in /sonar-dependency-check-plugin
#889
dependabot[bot]
closed
8 months ago
1
Update dependency-check-maven 9.0.X breaks Sonarqube Vulnerabilities report / JSON-Analysis aborted
#888
srcimon
closed
8 months ago
9
Bump actions/stale from 8 to 9
#887
dependabot[bot]
closed
9 months ago
1
9.0.2 of dependency-check plugin throws JSON parsing error with field "CvssV2.confidentialityImpact"
#886
istosSchulz
closed
9 months ago
4
Bump org.mockito:mockito-core from 5.7.0 to 5.8.0 in /sonar-dependency-check-plugin
#885
dependabot[bot]
closed
9 months ago
2
Bump com.github.eirslett:frontend-maven-plugin from 1.13.4 to 1.15.0 in /sonar-dependency-check-plugin
#884
dependabot[bot]
closed
7 months ago
2
Bump @babel/core from 7.21.0 to 7.23.5 in /sonar-dependency-check-plugin
#883
dependabot[bot]
closed
8 months ago
1
Bump com.github.spotbugs:spotbugs-annotations from 4.8.1 to 4.8.2 in /sonar-dependency-check-plugin
#882
dependabot[bot]
closed
9 months ago
1
Bump actions/setup-java from 3 to 4
#881
dependabot[bot]
closed
9 months ago
1
Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 in /sonar-dependency-check-plugin
#880
dependabot[bot]
closed
9 months ago
2
Integrate OWASP plugin with SonarQube from Azure Pipeline
#879
hyousif-pkglobal
closed
9 months ago
0
Bump de.jutzig:github-release-plugin from 1.4.0 to 1.5.1 in /sonar-dependency-check-plugin
#878
dependabot[bot]
closed
9 months ago
1
Bump jackson.version from 2.15.3 to 2.16.0 in /sonar-dependency-check-plugin
#877
dependabot[bot]
closed
9 months ago
1
assets section of each release doesnt include .sha256 file
#876
erickramer51115
opened
10 months ago
1
Bump @babel/core from 7.21.0 to 7.23.3 in /sonar-dependency-check-plugin
#875
dependabot[bot]
closed
9 months ago
1
Bump com.github.spotbugs:spotbugs-annotations from 4.8.0 to 4.8.1 in /sonar-dependency-check-plugin
#874
dependabot[bot]
closed
9 months ago
1
[Quality Gates] : Owasp Dependency check
#873
K44sper
closed
9 months ago
1
Bump junit.jupiter.version from 5.10.0 to 5.10.1 in /sonar-dependency-check-plugin
#872
dependabot[bot]
closed
10 months ago
1
Bump org.mockito:mockito-core from 5.6.0 to 5.7.0 in /sonar-dependency-check-plugin
#871
dependabot[bot]
closed
10 months ago
1
Support for Sonar 10.2 Software Quality Severities
#870
Blir
closed
6 months ago
7
Apache Log4j vulnerability
#869
eshwarkarthikn
closed
10 months ago
3
Bump com.github.eirslett:frontend-maven-plugin from 1.13.4 to 1.14.2 in /sonar-dependency-check-plugin
#868
dependabot[bot]
closed
9 months ago
1
Bump com.github.eirslett:frontend-maven-plugin from 1.13.4 to 1.14.1 in /sonar-dependency-check-plugin
#867
dependabot[bot]
closed
10 months ago
1
Bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 in /sonar-dependency-check-plugin
#866
dependabot[bot]
closed
10 months ago
1
Bump @babel/traverse from 7.21.2 to 7.23.2 in /sonar-dependency-check-plugin
#865
dependabot[bot]
closed
6 months ago
2
Bump webpack from 5.75.0 to 5.89.0 in /sonar-dependency-check-plugin
#864
dependabot[bot]
closed
7 months ago
1
URI encoded package names do not match names in lock-file
#863
slosd
closed
5 months ago
8
Bump jackson.version from 2.15.2 to 2.15.3 in /sonar-dependency-check-plugin
#862
dependabot[bot]
closed
10 months ago
1
Bump @babel/core from 7.21.0 to 7.23.2 in /sonar-dependency-check-plugin
#861
dependabot[bot]
closed
10 months ago
1
Bump com.github.spotbugs:spotbugs-annotations from 4.7.3 to 4.8.0 in /sonar-dependency-check-plugin
#860
dependabot[bot]
closed
10 months ago
2
The dependency check scan is not uploading the reports when scanning a project
#859
ammar-helasoft
closed
8 months ago
3
Cannot collspae Published Vulnerabilities in SonarQube
#858
dennys
closed
8 months ago
6
Bump org.mockito:mockito-core from 5.5.0 to 5.6.0 in /sonar-dependency-check-plugin
#857
dependabot[bot]
closed
10 months ago
1
Bump postcss from 8.4.21 to 8.4.31 in /sonar-dependency-check-plugin
#856
dependabot[bot]
closed
6 months ago
1
Bump org.sonarsource.parent:parent from 65.0.218 to 70.0.0.270 in /sonar-dependency-check-plugin
#855
dependabot[bot]
closed
8 months ago
1
Bump org.sonarsource.parent:parent from 65.0.218 to 69.0.0.267 in /sonar-dependency-check-plugin
#854
dependabot[bot]
closed
11 months ago
1
Bump jQuery.UI.Combined from 1.8.9 to 1.13.2 in /examples/multi-project-csproj/ExampleApp1
#853
dependabot[bot]
closed
6 months ago
3
Bump jQuery.UI.Combined from 1.8.9 to 1.13.0 in /examples/multi-project-csproj/ExampleApp1
#852
dependabot[bot]
closed
11 months ago
1
Bump @babel/core from 7.21.0 to 7.23.0 in /sonar-dependency-check-plugin
#851
dependabot[bot]
closed
11 months ago
1
Bump @babel/core from 7.21.0 to 7.22.20 in /sonar-dependency-check-plugin
#850
dependabot[bot]
closed
11 months ago
1
Bump @babel/core from 7.21.0 to 7.22.19 in /sonar-dependency-check-plugin
#849
dependabot[bot]
closed
11 months ago
1
Bump com.github.eirslett:frontend-maven-plugin from 1.13.4 to 1.14.0 in /sonar-dependency-check-plugin
#848
dependabot[bot]
closed
10 months ago
1
Bump @babel/core from 7.21.0 to 7.22.17 in /sonar-dependency-check-plugin
#847
dependabot[bot]
closed
11 months ago
1
Examples and tests still use removed `sonar.dependencyCheck.reportPath` property
#846
maloewe-ona
closed
6 months ago
5
Bump actions/checkout from 3 to 4
#845
dependabot[bot]
closed
7 months ago
3
Bump @babel/core from 7.21.0 to 7.22.15 in /sonar-dependency-check-plugin
#844
dependabot[bot]
closed
12 months ago
1
Bump @babel/core from 7.21.0 to 7.22.11 in /sonar-dependency-check-plugin
#843
dependabot[bot]
closed
1 year ago
1
False positive: NPM package ionicabizau/parse-url confused with parseurl
#842
jan316
closed
10 months ago
2
Bump org.mockito:mockito-core from 5.4.0 to 5.5.0 in /sonar-dependency-check-plugin
#841
dependabot[bot]
closed
1 year ago
1
Bump @babel/core from 7.21.0 to 7.22.10 in /sonar-dependency-check-plugin
#840
dependabot[bot]
closed
1 year ago
1
Previous
Next