sonarqube-licensecheck

sonarqube-licensecheck copied to clipboard

Cannot delete Project Licenses if there is only one entry

1

Nothing happens at all when clicking the 'Delete' button. Tried action on Firefox and Edge browsers.  A POST request is sent, https://*****/api/settings/set Body: key=licensecheck.project-license-set Response: {"errors":[{"msg":"Either \u0027value\u0027, \u0027values\u0027 or...

ashrafmr

@derkoe as far as I understand the code the GradleDependencyScanner.java supports only the java language. ```java private void prepareDependencySet(Set dependencySet, JsonArray arr) { for (javax.json.JsonValue entry : arr) { JsonObject...

Janpopan

@derkoe as far as I understand the MavenDependencyScanner.java code. This scanner only will be triggert if a java file is found: ```Java Dependency dependency = new Dependency(groupId + ":" +...

Janpopan

Gradle sonar plugin looking in the wrong directory

4

When I run the gradle sonar plugin, the GradleDependencyScanner is using the context path to look for the license-details.json file: https://github.com/porscheinformatik/sonarqube-licensecheck/blob/6b04f454dbe0ac4e807229543d365b5427302e44/src/main/java/at/porscheinformatik/sonarqube/licensecheck/gradle/GradleDependencyScanner.java#L51 This ends up looking in a directory under my...

adamkorynta

After adding SPDX list, getting error on Administration->System

2

Hello Team, This is to inform you that we have installed License-check plugin in SQ instance. After Adding SPDX List option in Administration->Configuration -> License check, we are getting error...

mahalekiran

NPM utilize package-lock.json or yarn.lock for packages if node_modules not present

1

Had a tough time getting this plugin to work since we don't scan our code base with sonarqube with node_modules present. Our other license scanner uses package-lock.json or yarn.lock and...

awoodobvio

We've run into some package that have shifted their license between versions and some versions of the package are not able to be used. It would be good to have...

awoodobvio

fix(deps): update dependency vue to v3 [security]

1

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [vue](https://redirect.github.com/vuejs/core/tree/main/packages/vue#readme) ([source](https://redirect.github.com/vuejs/core)) | [`2.7.15` -> `3.0.0`](https://renovatebot.com/diffs/npm/vue/2.7.15/3.0.0) | [](https://docs.renovatebot.com/merge-confidence/) |...

renovate[bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. #### Changes included in this PR - Changes to the following...

derkoe

License Check page in SonarQube dashboard not showing any licenses

3

I just tried your plugin and followed all the instructions for the setup in SonarQube. When I start analyzing my project with Maven, it seems to activate the sensor and...

thomas-eaa