open-vsx.org icon indicating copy to clipboard operation
open-vsx.org copied to clipboard
verified publisher icon EclipseFdn

Need to configure SonarQube

Open kineticsquid opened this issue 2 years ago • 8 comments

Need to configure SonarQube to run analyses on these three repos:

  • https://github.com/eclipse/openvsx/
  • https://github.com/EclipseFdn/open-vsx.org/
  • https://github.com/open-vsx/publish-extensions/

The first two have an EF SonarQube token configured. The third repo also will need a token.

Then, configure to have the analyses run. Details on that in this help desk ticket: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/issues/3331

kineticsquid avatar Jul 11 '23 17:07 kineticsquid

@amvanbaren How much work do you estimate this will take? I'd like to consider getting it in this year.

kineticsquid avatar Oct 25 '23 15:10 kineticsquid

@kineticsquid Wasn't @heurtematte working on this?

amvanbaren avatar Oct 25 '23 18:10 amvanbaren

@amvanbaren He was, but he needs us to make these changes. The helpdesk ticket above has the instructions for what we need to do.

kineticsquid avatar Oct 25 '23 21:10 kineticsquid

@amvanbaren @kineticsquid I can see the config file here, https://github.com/EclipseFdn/open-vsx.org/blob/main/sonar-project.properties. Where would I find the reports?

kineticsquid avatar Nov 08 '23 17:11 kineticsquid

@kineticsquid SonarQube doesn't analyze a PR from a forked repository: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/issues/3331#note_1266116

amvanbaren avatar Nov 09 '23 08:11 amvanbaren

@amvanbaren Sorry, I'm not following. None of these three repos are forks:

  • https://github.com/eclipse/openvsx/

  • https://github.com/EclipseFdn/open-vsx.org/

  • https://github.com/open-vsx/publish-extensions/

kineticsquid avatar Nov 09 '23 20:11 kineticsquid

@kineticsquid Right. It's about the origin of the PR, those are from forked repos, e.g. https://github.com/amvanbaren/openvsx/

amvanbaren avatar Nov 14 '23 09:11 amvanbaren

@amvanbaren Making sure we're talking about the same thing. We were to do some configuration work to enable SonarQube scanning for these three repos (an not forks of the repos). That was my intent with this issue (and the related information in the Gitlab issue). Is that enablement work complete? I'm asking because I was expecting to see some kind of report and I don't (maybe I'm looking in the wrong place).

kineticsquid avatar Nov 15 '23 18:11 kineticsquid

Reports can be viewed in the sonarcloud dashboard: https://sonarcloud.io/organizations/open-vsx/projects

amvanbaren avatar Sep 19 '24 10:09 amvanbaren