Hello everybody! I have repos where store files for nodejs, and also .java files which used for building .apk file. So, the scanning our java files was successfull, but I think that we must do the same to the reac-native code - cause the main configuration of our application was written ion react. For this purpose I use another job, and inserted via CLI in bitbucket-pipeline needed values, below arg in my pipeline:
step:
name: Scan source code for bugs, security threats
caches:
- "sonar"
script:
- pipe: sonarsource/sonarcloud-scan:1.4.0
variables:
SONAR_TOKEN: $SONAR_TOKEN
EXTRA_ARGS: '-Dsonar.projectKey="$PROJECT_KEY" -Dsonar.sources="$SONAR_SOURCE" -Dsonar.language="ts" -Dsonar.exclusion="$SONAR_EXCLUSION"'
SONAR_SCANNER_OPTS: -Xmx512m
DEBUG: "false"
in exclusion I have pattern like **/*.java - to exclude java files
in sonar sources I have path: src
So, my question is - why I haven’t anything in code lines after succesfull execution of pipeline ?
Attach screen with code lines chapter and logs which I suggest confused.
pipelineLog-{7cdf3028-2d78-4ec6-98f7-e207fa28f779}.txt (18.1 KB)