[jira] [Commented] (OFBIZ-7963) Create a Gradle Sonar task

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-7963?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16848402#comment-16848402 ]

Pierre Smits commented on OFBIZ-7963:
-------------------------------------

Jacques,

Due to secret key(s) required by SonarCloud.io this service will not work (ever) when done locally. You don't share secret keys with just anybody. The risk of the result getting messed is ever present.

You're saying that the patch does not work. That is an incorrect/incomplete statement. What you're referring to are missing inclusion/exclusion aspects. These should (must??) not be included in the gradle task, but should rather be included in the CI setup (as parameters) to ensure flexibility.

> Create a Gradle Sonar task
> --------------------------
>
>                 Key: OFBIZ-7963
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-7963
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Pierre Smits
>            Priority: Minor
>         Attachments: OFBIZ-7963-sonar.patch, OFBIZ-7963-sonar.patch, OFBIZ-7963-sonar.patch
>
>
> As ever the devil is in details. There is no longer a Sonar plugin available https://docs.gradle.org/current/userguide/sonar_plugin.htmland we should rather refer to http://docs.sonarqube.org/display/SCAN/Analyzing+with+SonarQube+Scanner+for+Gradle
> Anyway the most important part is to revivify INFRA-3590

--
This message was sent by Atlassian JIRA
(v7.6.3#76005)