Can't build SonarQube from source due to missing compliance-reports dependency

SonarQube Server / Community Build
1

Hi,

I am trying to build the SonarQube source locally and I am running into a dependency resolution failure related to some com.sonarsource.sonarcloud artifacts.

When I run the Gradle build, it fails with:

FAILURE: Build failed with an exception.

* What went wrong:
Could not determine the dependencies of task ':sonar-application:shadowJar'.
> Could not resolve all dependencies for configuration ':sonar-application:runtimeClasspath'.
   > Could not find com.sonarsource.sonarcloud:compliance-reports:0.0.1.2389.
     Required by:
         project :sonar-application > project :server:sonar-ce
         project :sonar-application > project :server:sonar-webserver
         project :sonar-application > project :server:sonar-ce > project :server:sonar-server-common
         project :sonar-application > project :server:sonar-webserver > project :server:sonar-webserver-webapi
         project :sonar-application > project :server:sonar-ce > project :server:sonar-ce-task-projectanalysis > project :server:sonar-db-dao
         project :sonar-application > project :server:sonar-webserver > project :server:sonar-webserver-core > project :server:sonar-webserver-es
   > Could not find com.sonarsource.sonarcloud:compliance-reports-metadata:0.0.1.2389.
     Required by:
         project :sonar-application > project :server:sonar-ce > project :server:sonar-ce-task-projectanalysis > project :server:sonar-db-dao

From what I can see, these coordinates:

  • com.sonarsource.sonarcloud:compliance-reports:0.0.1.2389
  • com.sonarsource.sonarcloud:compliance-reports-metadata:0.0.1.2389

do not seem to be available in any public Maven repositories that the build uses by default. Because of that, a clean clone of the repository on a fresh machine can not be built successfully.

If this is not intentional, could those dependencies be published to a public repository or the build be adjusted so that community builds do not require them?

I am interested in building SonarQube from source for testing, so having a fully reproducible build with only public dependencies would be very helpful.

Thanks in advance for any guidance.

Sonar Community Roundup, November 29 - December 5
Build from source failing again: missing sonar-spring dependency
4

Hi,

Sorry about that. We’re on it.

 
Ann

7

I’m facing the same today, Dec 22:

  • com.sonarsource.sonarcloud:compliance-reports:0.0.1.2515
  • com.sonarsource.sonarcloud:compliance-reports-metadata:0.0.1.2515

As an open source contributor who has contributed to Sonar in the past, I was quite sad that I couldn’t contribute more today.

I hope they can resolve this as soon as possible.

8

Hi @artsmandev,

Welcome to the community!

Are you still seeing this?

 
Ann

9

Hey Ann,
I’ve checked the fork and after sync*(100+ commits)* the build error is not present! :smiling_face_with_sunglasses:
I’ve another ones, testing failing due to “Use another signature type for git config gpg.format…” but all fine.
Thanks for feedback and sorry for late reply!

1 Like