The task is to run scanning on imported C# code from Azure AppService which is running on windows machine. Issue is through AppService SonarScanning commands are not working as expected, where i’m getting errors while running dotnet build & end commands, as part of running .net code analysis as suggested in SonarQube docs.
These are the logs for respective commands being executed from Azure AppService ( captured from Azure AppInsights ), Where the SONARQUBE_URL is pointing to our own SonarQube instance which is again hosted on different Azure AppService. Which is running on “Community Edition v10.6”.
Command 1 :
C:\home\DownloadProject\45\342>dotnet new tool-manifest
The template “Dotnet local tool manifest file” was created successfully.
Command 2 :
C:\home\DownloadProject\45\342>dotnet tool install dotnet-sonarscanner --local
You can invoke the tool from this directory using the following commands: ‘dotnet tool run dotnet-sonarscanner’ or ‘dotnet dotnet-sonarscanner’.
Tool ‘dotnet-sonarscanner’ (version ‘9.0.0’) was successfully installed. Entry is added to the manifest file C:\home\DownloadProject\45\342.config\dotnet-tools.json.
Command 3 :
C:\home\DownloadProject\45\342>$env:SONAR_USER_HOME = "C:\home\DownloadProject\45\342\
Command 4 :
C:\home\DownloadProject\45\342>dotnet tool restore
Tool ‘dotnet-sonarscanner’ (version ‘9.0.0’) was restored. Available commands: dotnet-sonarscanner
Restore was successful.
Command 5 :
C:\home\DownloadProject\45\342>dotnet sonarscanner begin /k:“DotNet_example-45-342” /d:sonar.token=“PROJECT_TOKEN” /d:sonar.host.url=“SONARQUBE_URL/” /d:sonar.dotnet.excludeTestProjects=true /d:sonar.scanner.scanAll=false /d:sonar.verbose=true
SonarScanner for MSBuild 9.0
Using the .NET Core version of the Scanner for MSBuild
Default properties file was found at C:\local\UserProfile\.nuget\packages\dotnet-sonarscanner\9.0.0\tools\netcoreapp3.1\any\SonarQube.Analysis.xml
Loading analysis properties from C:\local\UserProfile\.nuget\packages\dotnet-sonarscanner\9.0.0\tools\netcoreapp3.1\any\SonarQube.Analysis.xml
sonar.verbose=true was specified - setting the log verbosity to 'Debug'
Pre-processing started.
Preparing working directories...
Using environment variables to determine the download directory...
06:54:10.849 Loading analysis properties from C:\local\UserProfile\.nuget\packages\dotnet-sonarscanner\9.0.0\tools\netcoreapp3.1\any\SonarQube.Analysis.xml
06:54:10.909 Server Url: SONARQUBE_URL/
06:54:10.909 Api Url: SONARQUBE_URL/api/v2
06:54:10.909 Is SonarCloud: False
06:54:10.957 sonar.verbose=true was specified - setting the log verbosity to 'Debug'
06:54:10.968 Updating build integration targets...
06:54:10.989 Installed SonarQube.Integration.ImportBefore.targets to D:\DWASFiles\Sites\app-ai-dev-uksouth-002\LocalAppData\Microsoft\MSBuild\4.0\Microsoft.Common.targets\ImportBefore
06:54:10.99 Installed SonarQube.Integration.ImportBefore.targets to D:\DWASFiles\Sites\app-ai-dev-uksouth-002\LocalAppData\Microsoft\MSBuild\10.0\Microsoft.Common.targets\ImportBefore
06:54:10.992 Installed SonarQube.Integration.ImportBefore.targets to D:\DWASFiles\Sites\app-ai-dev-uksouth-002\LocalAppData\Microsoft\MSBuild\11.0\Microsoft.Common.targets\ImportBefore
06:54:11 Installed SonarQube.Integration.ImportBefore.targets to D:\DWASFiles\Sites\app-ai-dev-uksouth-002\LocalAppData\Microsoft\MSBuild\12.0\Microsoft.Common.targets\ImportBefore
06:54:11.002 Installed SonarQube.Integration.ImportBefore.targets to D:\DWASFiles\Sites\app-ai-dev-uksouth-002\LocalAppData\Microsoft\MSBuild\14.0\Microsoft.Common.targets\ImportBefore
06:54:11.01 Installed SonarQube.Integration.ImportBefore.targets to D:\DWASFiles\Sites\app-ai-dev-uksouth-002\LocalAppData\Microsoft\MSBuild\15.0\Microsoft.Common.targets\ImportBefore
06:54:11.012 Installed SonarQube.Integration.ImportBefore.targets to D:\DWASFiles\Sites\app-ai-dev-uksouth-002\LocalAppData\Microsoft\MSBuild\Current\Microsoft.Common.targets\ImportBefore
06:54:11.059 Installed SonarQube.Integration.targets to C:\home\DownloadProject\45\342\.sonarqube\bin\targets
06:54:11.06 Creating config and output folders...
06:54:11.069 Creating directory: C:\home\DownloadProject\45\342\.sonarqube\conf
06:54:11.079 Creating directory: C:\home\DownloadProject\45\342\.sonarqube\out
06:54:11.137 Downloading from SONARQUBE_URL/api/settings/values?component=unknown...
06:54:11.62 Response received from SONARQUBE_URL/api/settings/values?component=unknown...
06:54:11.629 Fetching server version...
06:54:11.631 Downloading from SONARQUBE_URL/api/v2/analysis/version...
06:54:12.251 Response received from SONARQUBE_URL/api/v2/analysis/version...
06:54:12.268 Using SonarQube v10.6.0.92116.
06:54:12.269 Checking if the server version is supported...
06:54:12.288 Checking validity of server license...
06:54:12.288 Downloading from SONARQUBE_URL/api/editions/is_valid_license...
06:54:12.342 Response received from SONARQUBE_URL/api/editions/is_valid_license...
06:54:12.432 SonarQube Community Edition detected, license is valid.
06:54:12.434 JreResolver: Resolving JRE path.
06:54:12.443 Downloading from SONARQUBE_URL/api/v2/analysis/jres?os=windows&arch=x64...
06:54:12.648 Response received from SONARQUBE_URL/api/v2/analysis/jres?os=windows&arch=x64...
06:54:12.993 JreResolver: Cache miss. Attempting to download JRE.
06:54:13.013 Starting the Java Runtime Environment download.
06:54:13.022 The JRE provisioning is a time consuming operation.
JRE provisioned: OpenJDK17U-jre_x64_windows_hotspot_17.0.11_9.zip.
If you already have a compatible java version installed, please add either the parameter "/d:sonar.scanner.skipJreProvisioning=true" or "/d:sonar.scanner.javaExePath=<PATH>".
06:54:13.023 Downloading Java JRE from analysis/jres/29a1a704-026c-4c58-9b81-ae9bc0ab2961.
06:54:13.028 Downloading from SONARQUBE_URL/api/v2/analysis/jres/29a1a704-026c-4c58-9b81-ae9bc0ab2961...
06:54:18.277 Response received from SONARQUBE_URL/api/v2/analysis/jres/29a1a704-026c-4c58-9b81-ae9bc0ab2961...
06:54:20.131 The checksum of the downloaded file is '4bafe2e94439c8193fc8c68247cb0dbaf4e80265b903288f63f128304f129bbe' and the expected checksum is '4bafe2e94439c8193fc8c68247cb0dbaf4e80265b903288f63f128304f129bbe'.
06:54:20.161 Starting extracting the Java runtime environment from archive '.sonar\cache\4bafe2e94439c8193fc8c68247cb0dbaf4e80265b903288f63f128304f129bbe\OpenJDK17U-jre_x64_windows_hotspot_17.0.11_9.zip' to folder '.sonar\cache\4bafe2e94439c8193fc8c68247cb0dbaf4e80265b903288f63f128304f129bbe\hg15hvmy.ljj'.
06:54:27.11 Moving extracted Java runtime environment from '.sonar\cache\4bafe2e94439c8193fc8c68247cb0dbaf4e80265b903288f63f128304f129bbe\hg15hvmy.ljj' to '.sonar\cache\4bafe2e94439c8193fc8c68247cb0dbaf4e80265b903288f63f128304f129bbe\OpenJDK17U-jre_x64_windows_hotspot_17.0.11_9.zip_extracted'.
06:54:27.119 The Java runtime environment was successfully added to '.sonar\cache\4bafe2e94439c8193fc8c68247cb0dbaf4e80265b903288f63f128304f129bbe\OpenJDK17U-jre_x64_windows_hotspot_17.0.11_9.zip_extracted'.
06:54:27.12 JreResolver: Download success. JRE can be found at '.sonar\cache\4bafe2e94439c8193fc8c68247cb0dbaf4e80265b903288f63f128304f129bbe\OpenJDK17U-jre_x64_windows_hotspot_17.0.11_9.zip_extracted\jdk-17.0.11+9-jre/bin/java.exe'.
06:54:27.136 Fetching analysis configuration settings...
06:54:27.145 Fetching properties for project 'DotNet_example-45-342'...
06:54:27.146 Downloading from SONARQUBE_URL/api/settings/values?component=DotNet_example-45-342...
06:54:27.4 Response received from SONARQUBE_URL/api/settings/values?component=DotNet_example-45-342...
06:54:27.444 Downloading from SONARQUBE_URL/api/languages/list...
06:54:27.505 Response received from SONARQUBE_URL/api/languages/list...
06:54:27.509 Fetching quality profile for project 'DotNet_example-45-342'...
06:54:27.509 Downloading from SONARQUBE_URL/api/qualityprofiles/search?project=DotNet_example-45-342...
06:54:27.685 Response received from SONARQUBE_URL/api/qualityprofiles/search?project=DotNet_example-45-342...
06:54:27.702 Fetching rules for quality profile '119299a1-43ac-4a3c-9fa2-c75541ce1ad2'...
06:54:27.702 Downloading from SONARQUBE_URL/api/rules/search?f=repo,name,severity,lang,internalKey,templateKey,params,actives&ps=500&qprofile=119299a1-43ac-4a3c-9fa2-c75541ce1ad2&p=1...
06:54:31.469 Response received from SONARQUBE_URL/api/rules/search?f=repo,name,severity,lang,internalKey,templateKey,params,actives&ps=500&qprofile=119299a1-43ac-4a3c-9fa2-c75541ce1ad2&p=1...
06:54:31.556 Local analyzer cache: C:\local\Temp\.sonarqube\resources
06:54:31.576 Writing Roslyn generated ruleset to C:\home\DownloadProject\45\342\.sonarqube\conf\Sonar-cs.ruleset...
06:54:31.62 Writing Roslyn generated ruleset to C:\home\DownloadProject\45\342\.sonarqube\conf\Sonar-cs-none.ruleset...
06:54:31.635 Provisioning analyzer assemblies for cs...
06:54:31.637 Installing required Roslyn analyzers...
06:54:31.637 Processing plugin: csharp version 9.27.0.93347
06:54:31.74 Cache miss: plugin files were not found in the local cache
06:54:31.74 Fetching resource for plugin: csharp, version 9.27.0.93347. Resource: SonarAnalyzer-9.27.0.93347.zip
06:54:31.741 Downloading SonarAnalyzer-9.27.0.93347.zip to C:\local\Temp\.sonarqube\resources\0
06:54:31.742 Downloading file to C:\local\Temp\.sonarqube\resources\0\SonarAnalyzer-9.27.0.93347.zip...
06:54:31.742 Downloading from SONARQUBE_URL/static/csharp/SonarAnalyzer-9.27.0.93347.zip...
06:54:31.857 Response received from SONARQUBE_URL/static/csharp/SonarAnalyzer-9.27.0.93347.zip...
06:54:31.871 Extracting files to C:\local\Temp\.sonarqube\resources\0...
06:54:31.946 Processing plugin: vbnet version 9.27.0.93347
06:54:31.959 Cache miss: plugin files were not found in the local cache
06:54:31.959 Fetching resource for plugin: vbnet, version 9.27.0.93347. Resource: SonarAnalyzer-9.27.0.93347.zip
06:54:31.959 Downloading SonarAnalyzer-9.27.0.93347.zip to C:\local\Temp\.sonarqube\resources\1
06:54:31.959 Downloading file to C:\local\Temp\.sonarqube\resources\1\SonarAnalyzer-9.27.0.93347.zip...
06:54:31.959 Downloading from SONARQUBE_URL/static/vbnet/SonarAnalyzer-9.27.0.93347.zip...
06:54:32.047 Response received from SONARQUBE_URL/static/vbnet/SonarAnalyzer-9.27.0.93347.zip...
06:54:32.049 Extracting files to C:\local\Temp\.sonarqube\resources\1...
06:54:32.134 Writing Roslyn analyzer additional file to C:\home\DownloadProject\45\342\.sonarqube\conf\cs\SonarLint.xml...
06:54:32.148 Fetching quality profile for project 'DotNet_example-45-342'...
06:54:32.148 Downloading from SONARQUBE_URL/api/qualityprofiles/search?project=DotNet_example-45-342...
06:54:32.244 Response received from SONARQUBE_URL/api/qualityprofiles/search?project=DotNet_example-45-342...
06:54:32.245 Fetching rules for quality profile '1b2a4b36-a060-4345-9065-2b309602bc59'...
06:54:32.245 Downloading from SONARQUBE_URL/api/rules/search?f=repo,name,severity,lang,internalKey,templateKey,params,actives&ps=500&qprofile=1b2a4b36-a060-4345-9065-2b309602bc59&p=1...
06:54:33.215 Response received from SONARQUBE_URL/api/rules/search?f=repo,name,severity,lang,internalKey,templateKey,params,actives&ps=500&qprofile=1b2a4b36-a060-4345-9065-2b309602bc59&p=1...
06:54:33.225 Local analyzer cache: C:\local\Temp\.sonarqube\resources
06:54:33.226 Writing Roslyn generated ruleset to C:\home\DownloadProject\45\342\.sonarqube\conf\Sonar-vbnet.ruleset...
06:54:33.237 Writing Roslyn generated ruleset to C:\home\DownloadProject\45\342\.sonarqube\conf\Sonar-vbnet-none.ruleset...
06:54:33.242 Provisioning analyzer assemblies for vbnet...
06:54:33.242 Installing required Roslyn analyzers...
06:54:33.242 Processing plugin: csharp version 9.27.0.93347
06:54:33.244 Cache hit: using plugin files from C:\local\Temp\.sonarqube\resources\0
06:54:33.244 Processing plugin: vbnet version 9.27.0.93347
06:54:33.244 Cache hit: using plugin files from C:\local\Temp\.sonarqube\resources\1
06:54:33.255 Writing Roslyn analyzer additional file to C:\home\DownloadProject\45\342\.sonarqube\conf\vbnet\SonarLint.xml...
06:54:33.266 Processing analysis cache
06:54:33.271 Incremental PR analysis: Base branch parameter was not provided.
06:54:33.272 Cache data is empty. A full analysis will be performed.
06:54:33.442 Pre-processing succeeded.
Command 6 :
C:\home\DownloadProject\45\342>dotnet build
Determining projects to restore...
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-2xjx-v99w-gqf3 [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-3gp9-h8hw-pxpw [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-3w5p-jhp5-c29q [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-5633-f33j-c6f7 [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-6px8-22w5-w334 [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-g5vf-38cp-4px9 [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-vgwq-hfqc-58wv [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-x5qj-9vmx-7g6g [C:\home\DownloadProject\45\342\testcoverage.sln]
Restored C:\home\DownloadProject\45\342\calculation\calculation.csproj (in 1.2 sec).
Restored C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj (in 3.23 sec).
1 of 3 projects are up-to-date for restore.
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-2xjx-v99w-gqf3
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-3gp9-h8hw-pxpw
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-3w5p-jhp5-c29q
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-5633-f33j-c6f7
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-6px8-22w5-w334
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-g5vf-38cp-4px9
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-vgwq-hfqc-58wv
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-x5qj-9vmx-7g6g
C:\Program Files (x86)\dotnet\sdk\8.0.400\Roslyn\Microsoft.CSharp.Core.targets(85,5): error : Error: [C:\home\DownloadProject\45\342\calculation\calculation.csproj]
C:\Program Files (x86)\dotnet\sdk\8.0.400\Roslyn\Microsoft.CSharp.Core.targets(85,5): error : An assembly specified in the application dependencies manifest (csc.deps.json) was not found: [C:\home\DownloadProject\45\342\calculation\calculation.csproj]
C:\Program Files (x86)\dotnet\sdk\8.0.400\Roslyn\Microsoft.CSharp.Core.targets(85,5): error : package: 'Microsoft.CodeAnalysis.ExternalAccess.RazorCompiler', version: '4.11.0-3.24365.8' [C:\home\DownloadProject\45\342\calculation\calculation.csproj]
C:\Program Files (x86)\dotnet\sdk\8.0.400\Roslyn\Microsoft.CSharp.Core.targets(85,5): error : path: 'Microsoft.CodeAnalysis.ExternalAccess.RazorCompiler.dll' [C:\home\DownloadProject\45\342\calculation\calculation.csproj]
Build FAILED.
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-2xjx-v99w-gqf3 [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-3gp9-h8hw-pxpw [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-3w5p-jhp5-c29q [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-5633-f33j-c6f7 [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-6px8-22w5-w334 [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-g5vf-38cp-4px9 [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-vgwq-hfqc-58wv [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-x5qj-9vmx-7g6g [C:\home\DownloadProject\45\342\testcoverage.sln]
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-2xjx-v99w-gqf3
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-3gp9-h8hw-pxpw
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-3w5p-jhp5-c29q
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-5633-f33j-c6f7
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-6px8-22w5-w334
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1903: Package 'Microsoft.NETCore.App' 2.1.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-g5vf-38cp-4px9
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-vgwq-hfqc-58wv
C:\home\DownloadProject\45\342\calculation.tests\calculation.tests.csproj : warning NU1902: Package 'Microsoft.NETCore.App' 2.1.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-x5qj-9vmx-7g6g
C:\Program Files (x86)\dotnet\sdk\8.0.400\Roslyn\Microsoft.CSharp.Core.targets(85,5): error : Error: [C:\home\DownloadProject\45\342\calculation\calculation.csproj]
C:\Program Files (x86)\dotnet\sdk\8.0.400\Roslyn\Microsoft.CSharp.Core.targets(85,5): error : An assembly specified in the application dependencies manifest (csc.deps.json) was not found: [C:\home\DownloadProject\45\342\calculation\calculation.csproj]
C:\Program Files (x86)\dotnet\sdk\8.0.400\Roslyn\Microsoft.CSharp.Core.targets(85,5): error : package: 'Microsoft.CodeAnalysis.ExternalAccess.RazorCompiler', version: '4.11.0-3.24365.8' [C:\home\DownloadProject\45\342\calculation\calculation.csproj]
C:\Program Files (x86)\dotnet\sdk\8.0.400\Roslyn\Microsoft.CSharp.Core.targets(85,5): error : path: 'Microsoft.CodeAnalysis.ExternalAccess.RazorCompiler.dll' [C:\home\DownloadProject\45\342\calculation\calculation.csproj]
16 Warning(s)
4 Error(s)
Time Elapsed 00:00:31.85
Command 7 :
C:\home\DownloadProject\45\342>dotnet sonarscanner end /d:sonar.token=“SONARQUBE_TOKEN”
SonarScanner for MSBuild 9.0
Using the .NET Core version of the Scanner for MSBuild
Post-processing started.
06:55:09.473 Uninstalling target: C:\home\DownloadProject\45\342\.sonarqube\bin\targets\SonarQube.Integration.targets
06:55:09.502 sonar.verbose=true was specified - setting the log verbosity to 'Debug'
06:55:09.503 Loading the SonarQube analysis config from C:\home\DownloadProject\45\342\.sonarqube\conf\SonarQubeAnalysisConfig.xml
06:55:09.503 Not running under TeamBuild
06:55:09.504 Analysis base directory: C:\home\DownloadProject\45\342\.sonarqube
Build directory:
Bin directory: C:\home\DownloadProject\45\342\.sonarqube\bin
Config directory: C:\home\DownloadProject\45\342\.sonarqube\conf
Output directory: C:\home\DownloadProject\45\342\.sonarqube\out
Config file: C:\home\DownloadProject\45\342\.sonarqube\conf\SonarQubeAnalysisConfig.xml
06:55:09.513 Generating SonarQube project properties file to C:\home\DownloadProject\45\342\.sonarqube\out\sonar-project.properties
06:55:09.541 Generation of the sonar-properties file failed. Unable to complete the analysis.
06:55:09.553 Writing processing summary to C:\home\DownloadProject\45\342\.sonarqube\out\ProjectInfo.log
No error message or information logged into C:\home\DownloadProject\45\342.sonarqube\out\ProjectInfo.log path. Content of this file looks like below after execution
Product projects
---------------------------------------
Test projects
---------------------------------------
Invalid projects
---------------------------------------
{none}
Skipped projects
---------------------------------------
{none}
Excluded projects
---------------------------------------
{none}
When same set of commands with actual values being executed from Azure AppService KUDU console ( on the same AppService where these commands being executed before ), Able to run without any errors for build & end command ( command 6 & command 7 - shown above executed without any build errors or exceptions).
Please help.