Skip to content

fix(report): update SonarQube issue format#8054

Open
omribz156 wants to merge 1 commit into
Checkmarx:masterfrom
omribz156:codex/kics-sonarqube-generic-issue-format
Open

fix(report): update SonarQube issue format#8054
omribz156 wants to merge 1 commit into
Checkmarx:masterfrom
omribz156:codex/kics-sonarqube-generic-issue-format

Conversation

@omribz156
Copy link
Copy Markdown

Closes #8043

Reason for Proposed Changes

  • Modern SonarQube versions warn when KICS imports the deprecated generic external issue format.
  • The current SonarQube generic issue format uses top-level rules and issues; rules carry the engine metadata, severity/type, Clean Code attribute, and impacts.

Proposed Changes

  • Build SonarQube reports with top-level rules plus issues.
  • Move engineId, rule type/severity, Clean Code attribute, and impacts onto rule entries.
  • Keep issue entries focused on ruleId, primary location, and secondary locations.
  • Add focused SonarQube report tests covering the new JSON shape and guarding against deprecated per-issue fields.

Verification

  • go test ./pkg/report/model ./pkg/report -run SonarQube
  • go test ./pkg/report/...
  • git diff --check -- pkg/report/model/sonarqube.go pkg/report/model/sonarqube_test.go pkg/report/sonarqube_test.go

Implemented with Codex assistance; I kept the change scoped to the SonarQube report model and reviewed the final diff manually.

I submit this contribution under the Apache-2.0 license.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug(sonarqube): update Sonarqube report formats

1 participant