SonarQube version: 6.7.7 LTS
I’m running sonar analysis on a java project and I’m seeing that this project has more than 2.8k code smells, 37 bugs, more than 50 vulnerabilities, 2k duplicate lines etc. Still this project is shown as passed.
I’ve see projects with much lower code smells and bugs shown as failed on sonarqube server.
I’m new to sonarqube and analysis and I’m trying to understand how these results are calculated?