Merge pull request #496 from darkspirit510/fix-sonarqube-script

fix sonarqube script

@darkspirit510 - I noticed that both the old and new output print out MANY lines like this:

14:40:06.077 WARN  Too many duplication references on file src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01318.java for block at line 74. Keep only the first 100 references.
14:40:06.077 WARN  Too many duplication references on file src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01318.java for block at line 76. Keep only the first 100 references.

Is there any way to suppress/disable those?

I tested this PR and it seems to work identically to the existing one, with regard to the score. But I assume there is a reason you wanted to change/update it. So I'm going to go ahead and merge it.

if you can figure out how to disable all this WARNings, that would be helpful.

Thx

Author: davewichers

scripts/runSonarQube.sh

@@ -64,11 +64,12 @@ echo "Starting scan... (might take some time!)"
 container_ip=$(docker inspect "$container_name" | jq -r '.[0].NetworkSettings.Networks.bridge.IPAddress' )
 sonar_docker_host="http://$container_ip:$sonar_internal_port"
 
-docker run --env SONAR_SCANNER_OPTS=-Xmx4g --rm -v ~/.m2:/root/.m2 -v "$(pwd)":"$(pwd)" -w "$(pwd)" sonarsource/sonar-scanner-cli \
+docker run --env SONAR_SCANNER_OPTS=-Xmx4g --rm -v ~/.m2:/root/.m2 -v "$(pwd)":/benchmark -w "/benchmark" sonarsource/sonar-scanner-cli \
+  -Dsonar.projectBaseDir="/benchmark" \
   -Dsonar.java.binaries="target" \
   -Dsonar.projectKey="$sonar_project" \
   -Dsonar.host.url="$sonar_docker_host" \
-  -Dsonar.login="$sonar_token" \
+  -Dsonar.token="$sonar_token" \
   -Dsonar.sources="src" \
   -Dsonar.exclusions="results/**,scorecard/**,scripts/**,tools/**,VMs/**,**/*.js"
 
@@ -82,6 +83,7 @@ done
 echo ""
 echo "Generating report..."
 
+mvn compile
 mvn exec:java -Dexec.mainClass="org.owasp.benchmark.report.sonarqube.SonarReport"
 
 echo "Shutting down SonarQube..."