Fortify-sonarqube-plugin

SonarQube Plugin Development
1

I updated SQ from v. 7.9.1 LTS to 8.9.1 LTS. There is a issue with plugin fortify-sonarqube-plugin-2.6.jar

2022.04.16 15:12:50 WARN  ce[][o.s.c.p.PluginClassLoader] Plugin Fortify [fortify] uses a child first classloader which is deprecated
2022.04.16 15:12:51 INFO  ce[][A.A.A.A.A.C] JavaScript/TypeScript frontend is enabled
2022.04.16 15:12:51 ERROR ce[][o.s.ce.app.CeServer] Compute Engine startup failed
java.lang.IllegalStateException: Fail to load plugin Fortify [fortify]
        at org.sonar.server.plugins.ServerExtensionInstaller.installExtensions(ServerExtensionInstaller.java:80)
        at org.sonar.ce.container.ComputeEngineContainerImpl.startLevel4(ComputeEngineContainerImpl.java:229)
        at org.sonar.ce.container.ComputeEngineContainerImpl.start(ComputeEngineContainerImpl.java:195)
        at org.sonar.ce.ComputeEngineImpl.startup(ComputeEngineImpl.java:45)
        at org.sonar.ce.app.CeServer$CeMainThread.attemptStartup(CeServer.java:163)
        at org.sonar.ce.app.CeServer$CeMainThread.run(CeServer.java:141)
Caused by: java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "getClassLoader")
        at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
        at java.base/java.security.AccessController.checkPermission(AccessController.java:897)
        at java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:322)
        at java.base/java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:2060)
        at java.base/java.lang.Thread.getContextClassLoader(Thread.java:1487)
        at com.fortify.integration.sonarqube.common.ContextClassLoaderAspect.wrapWithContextClassLoader(ContextClassLoaderAspect.java:94)
        at com.fortify.integration.sonarqube.common.ContextClassLoaderAspect.ajc$inlineAccessMethod$com_fortify_integration_sonarqube_common_ContextClassLoaderAspect$com_fortify_integration_sonarqube_common_ContextClassLoaderAspect$wrapWithContextClassLoader(ContextClassLoaderAspect.java:1)
        at com.fortify.integration.sonarqube.common.ContextClassLoaderAspect.wrapMethodWithContextClassLoader(ContextClassLoaderAspect.java:81)
        at com.fortify.integration.sonarqube.common.FortifyPlugin.define(FortifyPlugin.java:80)
        at org.sonar.server.plugins.ServerExtensionInstaller.installExtensions(ServerExtensionInstaller.java:70)
        ... 5 common frames omitted
2022.04.16 15:12:51 INFO  ce[][o.s.p.ProcessEntryPoint] Hard stopping process

Is it possible install this one?

2

Hi @Aleks ,

a trip to the google mobile got me to a deprecation note on the github repo of this plugin which answers that it’s incompatible with SQ 8.x and beyond, so i guess the answer is no.

1 Like
3

Thank you

4

Hi @Aleks ,

for SQ version greater than 8.x is there any other way to integrate fortify plugin?
Any help is appreciable.

Regards,
Akanchha