Skip to content

CLI-372 gb/sca-poc #231

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
georgii-borovinskikh-sonarsource wants to merge 7 commits into
base: master
Choose a base branch
from

CLI-353 Add sca-scanner downloader and spawner implementations

441cce0
Select commit
Loading
Failed to load commit list.
Draft

CLI-372 gb/sca-poc #231

CLI-353 Add sca-scanner downloader and spawner implementations
441cce0
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed Apr 30, 2026 in 39s

Quality Gate failed

Failed conditions
8 New issues
2 Security Hotspots

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 85 in src/cli/commands/analyze/dependency-risks.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Complete the task associated to this "TODO" comment. 

See more on https://sonarcloud.io/project/issues?id=SonarSource_sonarqube-cli&issues=AZ3ZkB3KN65eM815P24r&open=AZ3ZkB3KN65eM815P24r&pullRequest=231

Check warning on line 33 in src/cli/commands/analyze/dependency-risk-helpers/sca-scanner-spawner.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

No magic number: 120000. 

See more on https://sonarcloud.io/project/issues?id=SonarSource_sonarqube-cli&issues=AZ3ZkB3DN65eM815P24n&open=AZ3ZkB3DN65eM815P24n&pullRequest=231

Check warning on line 66 in src/cli/commands/_common/install/sca-scanner.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Complete the task associated to this "TODO" comment. 

See more on https://sonarcloud.io/project/issues?id=SonarSource_sonarqube-cli&issues=AZ3ZwPT_ex1L5p0OjfsJ&open=AZ3ZwPT_ex1L5p0OjfsJ&pullRequest=231

Check warning on line 83 in src/cli/commands/analyze/dependency-risks.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Complete the task associated to this "TODO" comment. 

See more on https://sonarcloud.io/project/issues?id=SonarSource_sonarqube-cli&issues=AZ3ZkB3KN65eM815P24q&open=AZ3ZkB3KN65eM815P24q&pullRequest=231

Check warning on line 133 in src/cli/commands/analyze/dependency-risk-helpers/sca-scanner-spawner.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Don't use a zero fraction in the number. 

See more on https://sonarcloud.io/project/issues?id=SonarSource_sonarqube-cli&issues=AZ3d6akoV7kcHrgON4oZ&open=AZ3d6akoV7kcHrgON4oZ&pullRequest=231

Check warning on line 69 in src/cli/commands/_common/install/sca-scanner.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

`String.raw` should be used to avoid escaping `\`. 

See more on https://sonarcloud.io/project/issues?id=SonarSource_sonarqube-cli&issues=AZ3ZwPT_ex1L5p0OjfsK&open=AZ3ZwPT_ex1L5p0OjfsK&pullRequest=231

Check warning on line 82 in src/cli/commands/analyze/dependency-risks.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Complete the task associated to this "TODO" comment. 

See more on https://sonarcloud.io/project/issues?id=SonarSource_sonarqube-cli&issues=AZ3ZkB3KN65eM815P24p&open=AZ3ZkB3KN65eM815P24p&pullRequest=231

Check warning on line 79 in src/cli/commands/analyze/dependency-risks.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Complete the task associated to this "TODO" comment. 

See more on https://sonarcloud.io/project/issues?id=SonarSource_sonarqube-cli&issues=AZ3ZkB3KN65eM815P24o&open=AZ3ZkB3KN65eM815P24o&pullRequest=231
View more details on SonarQubeCloud