Search results

Problem with JSON-Report-Mapping when Sonatype OSS Index Analyzer is activated

bug

Status: Open.

#1092 In dependency-check/dependency-check-sonar-plugin;

·Lars5678 openedon Oct 8, 2025

Reason of JSON-Analysis aborted should be provided

enhancement

Status: Open.

#1083 In dependency-check/dependency-check-sonar-plugin;

·slawekjaranowski openedon Aug 29, 2025

Bug wrong path issue dependency check in SonarQube

bug

lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.

Status: Open.

#1054 In dependency-check/dependency-check-sonar-plugin;

·Eiken0tt openedon May 28, 2025

CVE with CVSS Score of 9.8 is reported as Major on SonarQube

bug

Status: Open.

#1053 In dependency-check/dependency-check-sonar-plugin;

·mnisius openedon May 12, 2025

[SonarQube] : Quality gates missing settings

bug

lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.

Status: Open.

#950 In dependency-check/dependency-check-sonar-plugin;

·K44sper openedon May 28, 2024

assets section of each release doesnt include .sha256 file

enhancement

lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.

Status: Open.

#876 In dependency-check/dependency-check-sonar-plugin;

·erickramer51115 openedon Nov 9, 2023

Not resolving ENV var in GitHub Actions

bug

lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.

Status: Open.

#717 In dependency-check/dependency-check-sonar-plugin;

·lbenedetto openedon Nov 4, 2022

Issue description being changed to different CVE on repeated runs

bug

lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.

Status: Open.

#682 In dependency-check/dependency-check-sonar-plugin;

·jordannstrong openedon Jul 26, 2022

Vunerabilities found during dependency check is not shown in sonar UI

bug

Status: Open.

#677 In dependency-check/dependency-check-sonar-plugin;

·sudhirpandey openedon Jul 12, 2022

Vulnerabilities not visible in Sonar on pull requests

bug

lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.

Status: Open.

#485 In dependency-check/dependency-check-sonar-plugin;

·michalkochanowicz openedon Aug 20, 2021

Sonarqube + dependency-check plugin for dotnet

bug

lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.

Status: Open.

#473 In dependency-check/dependency-check-sonar-plugin;

·RunFox openedon Jul 27, 2021

Support Yarn

enhancement

lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.

Status: Open.

#367 In dependency-check/dependency-check-sonar-plugin;

·quinnturner openedon Feb 20, 2021