Philipp Dallig

I don't like the solution with the offsets because it has an unclean taste. Since the solution probably works, I leave the pull request open for people who also want...

Thank you, I will have a look.

There is a syntax error please look over it again.

Can you please do a rebase.

I have not yet tried this myself. I also don't know how to remove Rules. Maybe you have to mark them as deprecated first. Is there still the feature of...

I have just released 5.0.0. With the new version and the help of @NIGCH , the error should no longer occur.

As far as I know, environment variables are not supported for configuration. I would recommend that you store the configuration in each project. Take a look at this example. https://github.com/dependency-check/dependency-check-sonar-plugin/blob/a92c14f18b21b6d0e1841735813b0c929a7fd808/examples/single-module-gradle/build.gradle#L35-L41...

This default value comes from the deep history of this plugin. Originally probably for Jenkins. Here Jenkins has resolved the path. To which new default value should the paths be...

Pull request analysis is only available in a commercial version. Since I do not have access to such a version, I cannot reproduce this bug and therefore I am closing...

> Any pointer where to start looking? That's the [code part](https://github.com/dependency-check/dependency-check-sonar-plugin/blob/fdd6b888fee37798692f3c6a1def82818cd038ae/sonar-dependency-check-plugin/src/main/java/org/sonar/dependencycheck/DependencyCheckSensor.java#L102-L115) that uploads the HTML report. The [code part](https://github.com/dependency-check/dependency-check-sonar-plugin/blob/fdd6b888fee37798692f3c6a1def82818cd038ae/sonar-dependency-check-plugin/src/main/java/org/sonar/dependencycheck/DependencyCheckSensor.java#L154-L161) that adds issues to your code. The [code part](https://github.com/dependency-check/dependency-check-sonar-plugin/blob/fdd6b888fee37798692f3c6a1def82818cd038ae/sonar-dependency-check-plugin/src/main/js/report_page/components/DependencyCheckReportApp.js#L33-L49) that downloads...