Can't build SonarQube from source due to missing compliance-reports dependency

Hi,

I am trying to build the SonarQube source locally and I am running into a dependency resolution failure related to some com.sonarsource.sonarcloud artifacts.

When I run the Gradle build, it fails with:

FAILURE: Build failed with an exception.

* What went wrong:
Could not determine the dependencies of task ':sonar-application:shadowJar'.
> Could not resolve all dependencies for configuration ':sonar-application:runtimeClasspath'.
   > Could not find com.sonarsource.sonarcloud:compliance-reports:0.0.1.2389.
     Required by:
         project :sonar-application > project :server:sonar-ce
         project :sonar-application > project :server:sonar-webserver
         project :sonar-application > project :server:sonar-ce > project :server:sonar-server-common
         project :sonar-application > project :server:sonar-webserver > project :server:sonar-webserver-webapi
         project :sonar-application > project :server:sonar-ce > project :server:sonar-ce-task-projectanalysis > project :server:sonar-db-dao
         project :sonar-application > project :server:sonar-webserver > project :server:sonar-webserver-core > project :server:sonar-webserver-es
   > Could not find com.sonarsource.sonarcloud:compliance-reports-metadata:0.0.1.2389.
     Required by:
         project :sonar-application > project :server:sonar-ce > project :server:sonar-ce-task-projectanalysis > project :server:sonar-db-dao

From what I can see, these coordinates:

  • com.sonarsource.sonarcloud:compliance-reports:0.0.1.2389
  • com.sonarsource.sonarcloud:compliance-reports-metadata:0.0.1.2389

do not seem to be available in any public Maven repositories that the build uses by default. Because of that, a clean clone of the repository on a fresh machine can not be built successfully.

If this is not intentional, could those dependencies be published to a public repository or the build be adjusted so that community builds do not require them?

I am interested in building SonarQube from source for testing, so having a fully reproducible build with only public dependencies would be very helpful.

Thanks in advance for any guidance.

Hi,

Sorry about that. We’re on it.

 
Ann