npmpackage.info

Gathering detailed insights and metrics for sonarqube-verify

Other packages similar to sonarqube-verify

sonarqube-scanner

4.2.6

SonarQube/SonarCloud Scanner for the JavaScript world

karma-sonarqube-reporter

1.4.0

A karma reporter plugin for generating Sonarqube generic test reports

karma-sonarqube-unit-reporter

0.0.23

A Karma plugin. Report results in sonar-unit-tests xml format.

sonarqube-verify-project-key-name-custo

1.0.5

Launch SonarQube analysis and add a verification on the status of the Quality Gate after the report has ended

Gathering detailed insights and metrics for sonarqube-verify

sonarqube-verify

Launch SonarQube analysis and check the Quality Gate status after report has ended

1.0.2

MIT

JavaScript

1,435,237 1.7

Installations

npm install sonarqube-verify

Pull Requests

Open

6

Total

6

Closed

0

Issues

Open

2

Total

3

Closed

1

Releases

Unable to fetch releases

Developer

jlmwork

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

11.2.0

NPM Version

6.4.1 Statistics

4 Stars

8 Commits

6 Forks

1 Watching

6 Branches

3 Contributors

Updated on 12 Mar 2021

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

1,435,237

Last day

14.2%

563

Compared to previous day

Last week

-4.2%

2,997

Compared to previous week

Last month

10.5%

13,210

Compared to previous month

Last year

-76.1%

136,847

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

debug sonarqube-scanner

Versions

sonarqube-verify

Launch SonarQube analysis using the sonarqube-scanner npm module by @bellingard : https://github.com/bellingard/sonar-scanner-npm then it check the Quality Gate status after report has ended.

Tested with SonarQube 6.5

Usage

Installation

npm install -D sonarqube-verify

Execution (CLI)

Insert a script into your package.json :

"scripts" : {
    "verify": "sonarqube-verify"
}

Configuration

You can use a sonar-project.properties file at your root folder.

Look at Analysis Parameters for available values.

Configuration (CLI)

Best practices are to not set critical settings in your repository.

For example committing the login token into your sonar-project.properties sould absolutely be avoided.

This module allows you to use the following environment variables to provide runtime parameters :

SONAR_URL : Url of your SonarQube server. Defaults to http://localhost:9000
SONAR_LOGIN : token or login (in latter case you must not set a password)
SONAR_PASSWORD : (in case you are not using authentication token but you should)
SONAR_SKIP : to disable the sonar analysis
SONAR_GATE_SKIP : in case you would like to disable the quality check.

Sample Configuration

sonar.sources=src
sonar.sourceEncoding=UTF-8
sonar.exclusions=**/node_modules/**

Then run the verify :

export SONAR_URL=http://myhost.com/sonar
export SONAR_LOGIN=01234567890123456
npm run verify

You can activate debug logs with the DEBUG environment variable (using the debug package) :

DEBUG=* npm run verify

or more accurately :

DEBUG=sonarqube-verify:* npm run verify

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

0

Maintained

Determines if the project is "actively maintained".

0

SAST

Determines if the project uses static code analysis.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

1.7

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More