Sonar dependency-check plugin not working properly

SonarQube Plugin Development
,
1

Hello everyone,
the issue we are facing is more or less described here (Dynamic parts of dependency report when opened from SonarQube not working · Issue #970 · dependency-check/dependency-check-sonar-plugin · GitHub).

The problem we have is that after updating to sonarqube v10.6, the report coming from dependency-check does not work as it used to do, meaning that the different sections on it do not collapse.

So, if for example, we try to check the Suppressed Vulnerabilities, then this section will not appear, and the result is that we cant see dependencies etc.

Versions

  • dependency-check → latest
  • sonarqube → 10.6 Community Edition
  • dependency-check-sonar-plugin → 5.0.0

Any feedback will be greatly appreciated.
Thanks in advance!

2

Hey there.

As noted in the docs on Developing a plugin

Note that for security reasons, pages added to the UI cannot include inline scripts and unsafe eval expressions.

This change was made in SonarQube v10.0.

The plugin developer will probably need to rework this page.

3

Thank you Colin.