Hi - I am new to SonarQube and trying to get my project to fail when I introduce bugs or vulnerabilities. I am using SonarQube version 7.5.0.20543. I have created some errors in my java code - int z = 0; if (z==0) { z = 1 / z; // Noncompliant, possible division by zero } And then I run the fol…

Hi, If analysis is succeeding, then this shouldn’t have any impact. If you’re on a licensed version and you’ve hit your LoC limit, you should see a notification that the background task processing has failed. The background task error will tell you why. Ann

Hi, Whether or not an issue is raised, and what it’s type is are entirely different questions than “failing [the] build”. First, such an issue won’t be raised as a Vulnerability because that rule’s type is “Bug”. Second, do you confirm that you analyzed with a profile that includes that rule? And …

Okay - I was just testing and it does not show up as a Bug either. The source screenshot I had attached earlier was from SonarQube. Doesn’t that mean it is been analyzed?

Hi [image] p00rg: The source screenshot I had attached earlier was from SonarQube. Doesn’t that mean it is been analyzed? One would think. Are you sure the Divide by Zero rule is included in the (Java, right?) profile you used to analyze the project? You can double check from your project’s …

This shows which profiles used [image] This shows the rule used [image] So how do we debug the analysis?

Sorry I forgot to mention that the Duplication work beautifully. And the Coverage also works. Only Bugs Vulnerabilities and Code Smells dont work.

This is how its setup though findBugs is a child os Sonar way [image]

Also my code has added some code to trigger from FindBugs like the following where RequestMapping method is marked private - it should have caught that as a vulnerability. @RequestMapping(value = “/greet”) private String greet(String greetee) {

Hi, Okay, then can you post your analysis log? Ann

Is this what you are looking for? I did add these 2 but I dont see any verbose sonar.verbose=true sonar.log.level=DEBUG $ mvn clean verify sonar:sonar -Dsonar.host.url=http://sonar.clouddev.thermofisher.net [INFO] Scanning for projects... [WARNING] [WARNING] Some problems were encountered while …

Issues not failing build 7.5 SonarQube

SonarQube Server / Community Build

ganncamp (G Ann Campbell) January 9, 2019, 8:30pm 10

Hi,

Your Java quality profile is named FindBugs. I’m guessing it only includes rules from FindBugs. That would be why you don’t see the Divide by Zero issue: that rule doesn’t come from FindBugs but from SonarJava.

Ann

Topic		Replies	Views
SonarQube analysis results show zero results for Mulesoft execution (java based project) SonarQube Server / Community Build	6	3188	May 31, 2019
SonarQube not reporting duplication, bugs, vulnerabilities - only code coverage is being reported SonarQube Server / Community Build java , sonarqube , maven , coverage	6	308	August 19, 2024
Jenkins - Maven Project - SonarQube Analysis is UNSTABLE - ERROR: Unable to create symbol table for - java.lang.IllegalArgumentException: null SonarQube Server / Community Build java , sonarqube	13	3109	July 29, 2020
Metrics are null (zero) SonarQube Server / Community Build java , sonarqube , scanner , coverage	2	78	July 24, 2024
Interpreting my first run: Is it really working? SonarQube Server / Community Build java	10	252	September 9, 2024

Issues not failing build 7.5 SonarQube

Related topics