Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-06 Thread Slawomir Jaranowski
; The link is more than three years old. One of the replies from SonarQube > > contains a link that states that it is meanwhile (Aug 24) possible for > > projects configured for Automatic Analysis > > (https://portal.productboard.com/sonarsource/1-sonarqube-cloud/c/50-sonarcloud

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-06 Thread Konrad Windszus
n 5. Jan 2025, at 12:59, Gerd Aschemann wrote: > > The link is more than three years old. One of the replies from SonarQube > contains a link that states that it is meanwhile (Aug 24) possible for > projects configured for Automatic Analysis > (https://portal.productboard.com/sonar

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-05 Thread Benjamin Marwell
gs we don't need to fix and > likely shouldn't fix. The ratio of true bugs to non-bugs is way too > low to make SonarQube interesting. I certainly wouldn't want to run it > on every PR until there's a way to eliminate 99.9%+ of the noise. > Otherwise it will simply be

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-05 Thread Elliotte Rusty Harold
ones I initially noticed, but I also notice that several bugs before and after that are essentially noise: things we don't need to fix and likely shouldn't fix. The ratio of true bugs to non-bugs is way too low to make SonarQube interesting. I certainly wouldn't want to run it on every PR u

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-05 Thread Benjamin Marwell
e than three years old. One of the replies from SonarQube > contains a link that states that it is meanwhile (Aug 24) possible for > projects configured for Automatic Analysis > (https://portal.productboard.com/sonarsource/1-sonarqube-cloud/c/50-sonarcloud-analyzes-external-pull-request

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-05 Thread Gerd Aschemann
The link is more than three years old. One of the replies from SonarQube contains a link that states that it is meanwhile (Aug 24) possible for projects configured for Automatic Analysis (https://portal.productboard.com/sonarsource/1-sonarqube-cloud/c/50-sonarcloud-analyzes-external-pull

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-05 Thread Slawomir Jaranowski
at 14:10, Konrad Windszus wrote: > >> > >> Hi, > >> Maven currently does not leverage SonarQube analysis (nor any other static > >> code analysis). Although onboarding currently requires one INFRA ticket > >> per repo > >> (https://cwiki.apach

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-04 Thread Gerd Aschemann
> On 4. Jan 2025, at 22:28, Slawomir Jaranowski wrote: > > On Thu, 2 Jan 2025 at 14:10, Konrad Windszus wrote: >> >> Hi, >> Maven currently does not leverage SonarQube analysis (nor any other static >> code analysis). Although onboarding currently requi

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-04 Thread Slawomir Jaranowski
On Thu, 2 Jan 2025 at 14:10, Konrad Windszus wrote: > > Hi, > Maven currently does not leverage SonarQube analysis (nor any other static > code analysis). Although onboarding currently requires one INFRA ticket per > repo > (https://cwiki.apache.org/confluence/pages/viewpa

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-02 Thread Elliotte Rusty Harold
Generally static analysis is useful on a one-off basis, but there are > > rapidly diminishing returns for running it on the same codebase. > > > > > > > > On Thu, Jan 2, 2025 at 1:10 PM Konrad Windszus wrote: > >> > >> Hi, > >> Maven current

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-02 Thread Gerd Aschemann
rns for running it on the same codebase. > > > > On Thu, Jan 2, 2025 at 1:10 PM Konrad Windszus wrote: >> >> Hi, >> Maven currently does not leverage SonarQube analysis (nor any other static >> code analysis). Although onboarding currently requires one INFRA

Re: Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-02 Thread Elliotte Rusty Harold
onrad Windszus wrote: > > Hi, > Maven currently does not leverage SonarQube analysis (nor any other static > code analysis). Although onboarding currently requires one INFRA ticket per > repo > (https://cwiki.apache.org/confluence/pages/viewpage.action?spaceKey=INFRA&title=

Leveraging SonarQube Cloud (fka SonarCloud)

2025-01-02 Thread Konrad Windszus
Hi, Maven currently does not leverage SonarQube analysis (nor any other static code analysis). Although onboarding currently requires one INFRA ticket per repo (https://cwiki.apache.org/confluence/pages/viewpage.action?spaceKey=INFRA&title=SonarCloud+for+ASF+projects) this is a one time ac

Re: [maven-jenkins-lib] branch master updated: Activate sonarqube on first project

2018-12-28 Thread Robert Scholte
Already done :) But contacting the SonarQube Administrator might be interesting too. On Fri, 28 Dec 2018 13:40:54 +0100, Enrico Olivelli wrote: Robert, I think this commit is breaking all of the builds, like this: https://builds.apache.org/job/maven-box/job/maven-assembly-plugin/job

Re: [maven-jenkins-lib] branch master updated: Activate sonarqube on first project

2018-12-28 Thread Enrico Olivelli
-plugin: You're not authorized to execute any SonarQube analysis. Please contact your SonarQube administrator. -> [Help 1] Can we rollback this change ? Enrico Il giorno ven 28 dic 2018 alle ore 12:47 ha scritto: > > This is an automated email from the ASF dual-hosted git repository.

Re: SonarQube

2018-01-13 Thread Karl Heinz Marbaise
more detailed view on that... Kind regards Karl Heinz Marbaise [1]: https://builds.apache.org/analysis/overview?id=55842 [2]: https://builds.apache.org/view/M-R/view/Maven/job/SonarQube-Test-Maven-Enforcer/ - To unsubscribe, e

Re: SonarQube

2018-01-12 Thread Stephen Connolly
integration example elsewhere. > > I will take a more detailed view on that... > > Kind regards > Karl Heinz Marbaise > > [1]: https://builds.apache.org/analysis/overview?id=55842 > [2]: > > https://builds.apache.org/view/M-R/vi

Re: SonarQube

2018-01-12 Thread Sylwester Lachiewicz
the first step...and simple approach with results[1] > and the job[2]. > > I will take a more detailed view on that... > > Kind regards > Karl Heinz Marbaise > > [1]: https://builds.apache.org/analysis/overview?id=55842 > [2]: > > https://builds.apache.org/view/M-R/vi

SonarQube

2018-01-12 Thread Karl Heinz Marbaise
Hi, so I have taken the first step...and simple approach with results[1] and the job[2]. I will take a more detailed view on that... Kind regards Karl Heinz Marbaise [1]: https://builds.apache.org/analysis/overview?id=55842 [2]: https://builds.apache.org/view/M-R/view/Maven/job/SonarQube

Re: Doxia SonarQube analysis failures

2015-10-26 Thread G. Ann Campbell
Java target. > > Thanks for the report. > > Regards, > > Hervé > > Le mardi 20 octobre 2015 09:15:30 G. Ann Campbell a écrit : > > Hi, > > > > I hope I'm directing this to the right list. > > > > SonarQube analysis on Nemo > > <

Re: Doxia SonarQube analysis failures

2015-10-24 Thread Hervé BOUTEMY
the right list. > > SonarQube analysis on Nemo > <http://nemo.sonarqube.org/dashboard/index/334402> has been failing for > Doxia Aggregator since 26 Sept. with this: > > [INFO] *--- maven-enforcer-plugin:1.3.1:enforce > (enforce-bytecode-version) @ doxia-doc-rendere

Re: Doxia SonarQube analysis failures

2015-10-23 Thread G. Ann Campbell
> [1] > > http://repo1.maven.org/maven2/org/apache/maven/maven-parent/27/maven-parent-27.pom > > On Tue, Oct 20, 2015 at 3:15 PM, G. Ann Campbell < > ann.campb...@sonarsource.com> wrote: > > > Hi, > > > > I hope I'm directing this to the right list. &

Re: Doxia SonarQube analysis failures

2015-10-23 Thread Tibor Digana
Hi, > > I hope I'm directing this to the right list. > > SonarQube analysis on Nemo > <http://nemo.sonarqube.org/dashboard/index/334402> has been failing for > Doxia Aggregator since 26 Sept. with this: > > [INFO] *--- maven-enforcer-plugin:1.3.1:enforce >

Re: Doxia SonarQube analysis failures

2015-10-23 Thread G. Ann Campbell
Okay, thanks anyway. --- *G. Ann CAMPBELL* | SonarSource Product Owner http://sonarsource.com On Tue, Oct 20, 2015 at 9:15 AM, G. Ann Campbell < ann.campb...@sonarsource.com> wrote: > Hi, > > I hope I'm directing this to the right list. > > SonarQub

Doxia SonarQube analysis failures

2015-10-20 Thread G. Ann Campbell
Hi, I hope I'm directing this to the right list. SonarQube analysis on Nemo <http://nemo.sonarqube.org/dashboard/index/334402> has been failing for Doxia Aggregator since 26 Sept. with this: [INFO] *--- maven-enforcer-plugin:1.3.1:enforce (enforce-bytecode-version) @ doxia-d