search

fortify / FortifyVulnerabilityExporter

Export Fortify vulnerability data to GitHub, GitLab, SonarQube and more
Other
24 stars 8 forks source link

SonarQube: Don't output 0 as line number #20

Closed rsenden closed 3 years ago

rsenden commented 3 years ago

In Fortify, some vulnerabilities have their lineNumber field set to 0, which is copied as-is to the SonarQube output. SonarQube however throws an error if the line number is 0. FortifyVulnerabilityExporter should set the line number to 1 in such cases, to prevent these SonarQube errors.

dobromirttmf commented 3 years ago

@rsenden

How FortifyVulnerabilityExporter should set the line number to 1? Is there any workaround or a fix? Thank you.