stepstone-tech / sonar-coldfusion

SonarQube ColdFusion Analyzer
Apache License 2.0
24 stars 18 forks source link

Use CFLint API directly, and use JSON configuration #33

Open dajester2013 opened 2 years ago

dajester2013 commented 2 years ago

This update uses the CFLint API directly rather than run through a command executor. This has the benefit of only scanning files matching the sonarqube inclusions/exclusions, rather than scan the entire codebase.

Also, use the JSON config format, as the XML format is deprecated.

dajester2013 commented 2 years ago

It does also bump the version to 2.3.0

quicken commented 2 years ago

Thanks for that fix. I built from your repo using your patch and it fixed our build issue. Awesome! Hope your patch makes it into this repo soi that we can use the "official" build again.