Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SONARGO-103 Scan Go dependencies by Mend #75

Merged
merged 1 commit into from
Jan 6, 2025

Conversation

mstachniuk
Copy link
Contributor

@mstachniuk mstachniuk commented Jan 6, 2025

SONARGO-103

Part of

Copy link

sonarqube-next bot commented Jan 6, 2025

Quality Gate passed Quality Gate passed for 'Go'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

Copy link
Contributor

@jonas-wielage-sonarsource jonas-wielage-sonarsource left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, please look at my comment

Comment on lines -9 to -14
maven.aggregateModules=False
maven.downloadMissingDependencies=False
maven.ignoredScopes=None
maven.m2RepositoryPath=.m2/repository
maven.resolveDependencies=False
maven.runPreStep=False
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Those would only be used in a maven build right?
In this case, we should delete those entries for the other analyzers.

Looking at sonar-kotlin I also see that they use gradle.excludeModules. Do you know why we are not using it?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, they are used in Maven build. If the results for sonar-go looks good, then I can remove such lines in other our repos.

The gradle.excludeModules is somehow duplicated by excludes=... line 1. IMO there is no need to define it.

@mstachniuk mstachniuk merged commit e869f93 into master Jan 6, 2025
11 checks passed
@mstachniuk mstachniuk deleted the SONARGO-103-fix-mend-configuration branch January 6, 2025 11:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants