search

mulesoft-catalyst / mule-sonarqube-plugin

The Mule SonarQube Plugin provides the capability to do code inspecting and taking project metrics from a mule project using SonarQube.
The Unlicense
48 stars 69 forks source link

Quality Gate used but is not working. #17

Open anupam-chakraborty opened 4 years ago

anupam-chakraborty commented 4 years ago

Hi,

We found this issue that Quality Gate used but is not working.

We have configured the project to use the Standard Quality Gate, and we do see that the project shows Quality Gate passed even if there are errors / Vulnerabilities in the project. Please see the attached screenshot. We have created custom Quality Gate as well and it still does the same.

Check Result: SonarQualityGate Quality Gate Config: SonarQualityGate2

Does this code not validate the quality gate? Thanks for helping with this.

fperezpa commented 3 years ago

Hi, Of that gate, the only metrics that the plugin generates is the coverage. But I don't see in the metrics of the project. Are you getting the coverage?

I guess the correct approach is to create a custom gate and configured the project to use it. Could you check that?

GiuseppeMP commented 2 years ago

@anupam-chakraborty

Your pic looks like a xml analysis, maybe you missing this workaround in the pom.xml properties:

<sonar.lang.patterns.xml>null</sonar.lang.patterns.xml>
<sonar.mule.file.suffixes>.xml</sonar.mule.file.suffixes>