I am using Mocha with SonarQube to test my Node.JS application. It runs on Jenkins. This is my dependency in package.json: "mocha-sonarqube-reporter": "^1.0.1", "sonarqube-scanner": "^2.6.0" This is my script: const scanner = require("sonarqube-scanner"); scanner( { serverUrl: "http://sona…

Hi, First, the dependency check plugin is a 3rd-party plugin provided by the community. That’s (probably) only a side note. What’s interesting is that it’s trying to read a report at a specific location when you apparently haven’t told it to. So the question is where that configuration is coming f…

Hi, I can do what you suggest but I always thought “${WORKSPACE}/dependency-check-report.xml” the default value of the configuration property. No?

Hi, There are often default paths at which plugins look for their reports, but I wouldn’t expect a plugin to set a default path that contains an environment variable (${WORKSPACE}). Ann

Just checked the project at git: https://github.com/dependency-check/dependency-check-sonar-plugin , ${WORKSPACE}/dependency-check-report.foo are the default values. We have to provide the configuration values and the dependency check reports have to be present for the sonarqube scan to proceed.

Hi, [image] khteh: Just checked the project at git: GitHub - dependency-check/dependency-check-sonar-plugin: Integrates Dependency-Check reports into SonarQube , ${WORKSPACE}/dependency-check-report.foo are the default values. We have to provide the configuration values and the dependency check …

No, I do not uninstall this built-in plug in which comes installed with your plug in. How to do that? Yes, you should mark it as incompatible as I didn’t have any dependency report generated and your plugin just gets stuck and doesn’t continue the scanning. I will file an issue at the github project…

sonar scan is stuck at this plugin if ${WORKSPACE}/dependency-check-report.foo is not present opened 03:16AM - 27 Jun 20 UTC (UTC) [khteh] khteh I am using "sonarqube…

Hi Ann and khteh, As you can read in the WARN output, this plugin skips the processing if no report is found. So you should not have any issues if no report is found. The stacktrace in DEBUG output is only used for debugging and has no effect at all. The environment variable WORKSPACE has histori…

Hi @khteh , it seems that you are using a very old version of the dependency-check-sonar-plugin. You have a warning message telling you that you should check the sonar.dependencyCheck.reportPath property. This property didn’t even exist anymore. As you can see in this commit , I changed the propert…

Hi Philipp, This is a built-in plugin which comes installed with “sonarqube-scanner”: “^2.6.0” with npm i sonarqube-scanner CLI command. I didn’t hand-pick the version of sonarqube-scanner. I have no idea how it picks up the old version of the dependency-check plugin. Maybe this is the missing piec…

java.io.FileNotFoundException: Dependency-Check report does not exist

SonarQube Server / Community Build

khteh (Teh Kok How) June 27, 2020, 3:17am 8

Topic		Replies	Views
Installing dependency-checker SonarQube Server / Community Build sonarqube	1	3293	September 2, 2022
Sonar Configuration for multi-module project with OWASP dependency check report included SonarQube Server / Community Build	3	7048	September 22, 2018
Issues With Dependency-Check HTML Reports in SonarQube SonarQube Server / Community Build	1	7370	March 11, 2021
Azure DevOps (VSTS) - cant find dependency check report in plain sight SonarQube Server / Community Build azuredevops-services , bug-no-category	1	2608	July 3, 2019
Question 2 : How to Disable/Skip Dependency Check for few projects SonarQube Server / Community Build sonarqube	2	4812	October 11, 2019

java.io.FileNotFoundException: Dependency-Check report does not exist

Related topics