Must-share information (formatted with Markdown ): which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension) - Community Edition Version 9.4 (build 54424) what are you trying to achieve - JS files are not being scanned what have you tried so far to achieve this - Compi…

Currently I am using below goals in Maven for Sonar Analysis. mvn -Pbootstrap clean install sonar:sonar Please confirm if the below tag to be added to sonar.properties file. <sonar.sources>src/js</sonar.sources>

This would be added instead of your Maven pom.xml file, either at the root or for a specific project (if only one project contains Javascript files, for example).

@Colin - Thank you Colin for the prompt response but unfortunately suggested solution didn’t work. I have added below properties to pom. Any other alternate option? * * <sonar.sources>src/js</sonar.sources>* As per Analysis JavaScript and Java in one project - #2 by TomVanBraband

It’s probably best if you share the logs from an analysis (mvn sonar:sonar) where you’ve made the adjustment, as well as the pom.xml that you adjusted.

Looks like I found the root cause I used Sonar Secret plugins for free text password but now they are not compatible with Java11. Can Sonar Community edition scan and report free text passwords from JS files?

Hey there. I’m not sure I understand – what plugin were you using, and where was it installed?

Hi @Colin - I have used Sonar Secret plugins - GitHub - Skyscanner/sonar-secrets: SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc.. in Java 8 [Sonar Community edition - * 8.8 (build 42792). Now I am in * Community Edition * Version 9.4 (build 5…

Okay. As mentioned before: [image] Colin: It’s probably best if you share the logs from an analysis (mvn sonar:sonar) where you’ve made the adjustment, as well as the pom.xml that you adjusted.

Hi @Colin - Please find the attached Jenkins console output. MVN - /tools/devutils/apache-maven-3.3.3/bin/mvn -f FTS-GUISVR/pom_sonar.xml -DSOURCE_GIT_COMMIT=a45fg6rd66955b987345dsews474edc5bf3b871d -DJAVA_HOME=/opt/java8jdk/bin -s /tools/devutils/sonar_config/maven-3.3.3/settings_sonar_222h.xml …

How to scan JS files which are not being compiled with Maven

SonarQube Server / Community Build

Colin (Colin) September 14, 2022, 8:25am 2

Hey there.

You can update <sonar.sources> in your pom.xml to include other directories (it defaults to src/main/java). You can include multiple, comma separated directories.

Topic		Replies	Views
Mixed Java/Javascript maven project doesn't see the javascript portion SonarQube Server / Community Build javascript , coverage	2	108	May 15, 2025
Analysis JavaScript and Java in one project SonarQube Cloud	3	5853	January 6, 2020
Sonar properties for a multi language project when using sonar scanner maven plugin SonarQube Server / Community Build javascript , java , scanner , css	7	3958	April 2, 2021
Sonar 8.9 unknown files when analyze with MAVEN SonarQube Server / Community Build java , sonarqube , scanner	3	597	September 30, 2022
Unable to scan multi language projects SonarQube Server / Community Build	2	263	March 14, 2024

How to scan JS files which are not being compiled with Maven

Related topics