Need guidance in configuring owasp dependency and jacoco in apache ant java project

[Colin]

Hey there.

• For anything related to Dependency Check, you’ll need to raise an issue with them on GitHub. GitHub - dependency-check/dependency-check-sonar-plugin: Integrates Dependency-Check reports into SonarQube
• For JaCoCo, SonarQube is only involved in reading the report (it doesn’t care how it’s generated). The JaCoCo Ant tasks might help you. Do you have an XML JaCoCo report already being generated? If so, what do the logs say about importing it?

How to find logs about importing code coverage

When coverage data isn’t appearing as expected in SonarQube / SonarCloud, the first place you should look is the scanner logs. Where do I find the scanner logs? This will likely be broken out into its own guide soon The Scanner logs are the output of executing one of the scanners, either directly or wrapped by one of many integrations, such as the SonarScanner for Jenkins, SonarScanner for Azure DevOps, SonarQube/SonarCloud GitHub Actions or SonarQube / SonarCloud Bitbucket Pipes. …