sonarqube/build.gradle

585 lines
22 KiB
Groovy

import groovy.json.JsonOutput
plugins {
// Ordered alphabeticly
id 'com.github.hierynomus.license' version '0.15.0'
id "com.github.hierynomus.license-report" version "0.15.0" apply false
id 'com.github.johnrengelman.shadow' version '5.2.0' apply false
id 'com.google.protobuf' version '0.8.18' apply false
id 'com.jfrog.artifactory' version '4.24.23'
id 'io.spring.dependency-management' version '1.0.11.RELEASE'
id 'org.sonarqube' version '3.3'
id "de.undercouch.download" version "5.0.1" apply false
}
if (!JavaVersion.current().java11Compatible) {
throw new GradleException("JDK 11+ is required to perform this build. It's currently " + System.getProperty("java.home") + ".")
}
allprojects {
apply plugin: 'com.jfrog.artifactory'
apply plugin: 'maven-publish'
ext.versionInSources = version
ext.buildNumber = System.getProperty("buildNumber")
// when no buildNumber is provided, then project version must end with '-SNAPSHOT'
if (ext.buildNumber == null) {
version = "${version}-SNAPSHOT".toString()
ext.versionWithoutBuildNumber = version
} else {
ext.versionWithoutBuildNumber = version
version = (version.toString().count('.') == 1 ? "${version}.0.${ext.buildNumber}" : "${version}.${ext.buildNumber}").toString()
}
ext {
release = project.hasProperty('release') && project.getProperty('release')
official = project.hasProperty('official') && project.getProperty('official')
}
repositories {
def repository = project.hasProperty('qa') ? 'sonarsource-qa' : 'sonarsource'
maven {
// The environment variables ARTIFACTORY_PRIVATE_USERNAME and ARTIFACTORY_PRIVATE_PASSWORD are used on QA env (Jenkins)
// On local box, please add artifactoryUsername and artifactoryPassword to ~/.gradle/gradle.properties
def artifactoryUsername = System.env.'ARTIFACTORY_PRIVATE_USERNAME' ?: (project.hasProperty('artifactoryUsername') ? project.getProperty('artifactoryUsername') : '')
def artifactoryPassword = System.env.'ARTIFACTORY_PRIVATE_PASSWORD' ?: (project.hasProperty('artifactoryPassword') ? project.getProperty('artifactoryPassword') : '')
if (artifactoryUsername && artifactoryPassword) {
credentials {
username artifactoryUsername
password artifactoryPassword
}
} else {
// Workaround for artifactory
// https://www.jfrog.com/jira/browse/RTFACT-13797
repository = 'public'
}
url "https://repox.jfrog.io/repox/${repository}"
}
}
task allDependencies {
dependsOn 'dependencies'
}
artifactory {
clientConfig.setIncludeEnvVars(true)
clientConfig.setEnvVarsExcludePatterns('*password*,*PASSWORD*,*secret*,*MAVEN_CMD_LINE_ARGS*,sun.java.command,*token*,*TOKEN*,*LOGIN*,*login*,*key*,*KEY*,*signing*')
contextUrl = System.getenv('ARTIFACTORY_URL')
publish {
repository {
repoKey = System.getenv('ARTIFACTORY_DEPLOY_REPO')
username = System.getenv('ARTIFACTORY_DEPLOY_USERNAME') ?: project.properties.artifactoryUsername
password = System.getenv('ARTIFACTORY_DEPLOY_PASSWORD') ?: project.properties.artifactoryPaswword
}
defaults {
properties = [
'build.name': 'sonar-enterprise',
'build.number': System.getenv('BUILD_NUMBER'),
'pr.branch.target': System.getenv('GITHUB_BASE_BRANCH'),
'pr.number': System.getenv('PULL_REQUEST'),
'vcs.branch': System.getenv('GITHUB_BRANCH'),
'vcs.revision': System.getenv('GIT_SHA1'),
'version': version
]
publications('mavenJava')
publishPom = true
publishIvy = false
}
}
clientConfig.info.setBuildName('sonar-enterprise')
clientConfig.info.setBuildNumber(System.getenv('BUILD_NUMBER'))
// Define the artifacts to be deployed to https://binaries.sonarsource.com on releases
clientConfig.info.addEnvironmentProperty('ARTIFACTS_TO_PUBLISH',
"${project.group}:sonar-application:zip," +
"com.sonarsource.sonarqube:sonarqube-developer:zip," +
"com.sonarsource.sonarqube:sonarqube-datacenter:zip," +
"com.sonarsource.sonarqube:sonarqube-enterprise:zip")
// The name of this variable is important because it's used by the delivery process when extracting version from Artifactory build info.
clientConfig.info.addEnvironmentProperty('PROJECT_VERSION', "${version}")
}
}
apply plugin: 'org.sonarqube'
sonarqube {
properties {
property 'sonar.projectName', projectTitle
property 'sonar.projectVersion', "${versionInSources}-SNAPSHOT"
property 'sonar.buildString', version
}
}
tasks.named('wrapper') {
distributionType = Wrapper.DistributionType.ALL
}
subprojects {
apply plugin: 'com.github.hierynomus.license'
apply plugin: 'io.spring.dependency-management'
apply plugin: 'jacoco'
apply plugin: 'java'
apply plugin: 'idea'
apply plugin: 'signing'
// do not deploy to Artifactory by default
artifactoryPublish.skip = true
def testFixtureSrc = 'src/testFixtures'
if (file(testFixtureSrc).exists()) {
apply plugin: 'java-test-fixtures'
}
ext {
protobufVersion = '3.19.4'
}
sonarqube {
properties {
property 'sonar.moduleKey', project.group + ':' + project.name
}
}
// Central place for definition dependency versions and exclusions.
dependencyManagement {
dependencies {
// bundled plugin list -- keep it alphabetically ordered
dependency 'com.sonarsource.abap:sonar-abap-plugin:3.10.0.3628'
dependency 'com.sonarsource.cobol:sonar-cobol-plugin:4.6.2.4876'
dependency 'com.sonarsource.cpp:sonar-cfamily-plugin:6.30.0.42324'
dependency 'com.sonarsource.pli:sonar-pli-plugin:1.11.1.2727'
dependency 'com.sonarsource.plsql:sonar-plsql-plugin:3.7.0.4372'
dependency 'com.sonarsource.plugins.vb:sonar-vb-plugin:2.8.0.3021'
dependency 'com.sonarsource.rpg:sonar-rpg-plugin:3.2.0.3034'
dependency 'com.sonarsource.security:sonar-security-csharp-frontend-plugin:9.3.0.14923'
dependency 'com.sonarsource.security:sonar-security-java-frontend-plugin:9.3.0.14923'
dependency 'com.sonarsource.security:sonar-security-php-frontend-plugin:9.3.0.14923'
dependency 'com.sonarsource.security:sonar-security-plugin:9.3.0.14923'
dependency 'com.sonarsource.security:sonar-security-python-frontend-plugin:9.3.0.14923'
dependency 'com.sonarsource.security:sonar-security-js-frontend-plugin:9.3.0.14923'
dependency 'com.sonarsource.slang:sonar-apex-plugin:1.9.0.3429'
dependency 'com.sonarsource.swift:sonar-swift-plugin:4.5.0.5305'
dependency 'com.sonarsource.tsql:sonar-tsql-plugin:1.6.0.4844'
dependency 'org.sonarsource.config:sonar-config-plugin:1.2.0.267'
dependency 'org.sonarsource.dotnet:sonar-csharp-plugin:8.34.0.42011'
dependency 'org.sonarsource.dotnet:sonar-vbnet-plugin:8.34.0.42011'
dependency 'org.sonarsource.flex:sonar-flex-plugin:2.7.0.2865'
dependency 'org.sonarsource.html:sonar-html-plugin:3.6.0.3106'
dependency 'org.sonarsource.jacoco:sonar-jacoco-plugin:1.1.1.1157'
dependency 'org.sonarsource.java:sonar-java-plugin:7.9.0.28969'
dependency 'org.sonarsource.javascript:sonar-javascript-plugin:8.8.0.17228'
dependency 'org.sonarsource.php:sonar-php-plugin:3.22.1.8626'
dependency 'org.sonarsource.python:sonar-python-plugin:3.9.0.9230'
dependency 'org.sonarsource.slang:sonar-go-plugin:1.9.0.3429'
dependency 'org.sonarsource.kotlin:sonar-kotlin-plugin:2.9.0.1147'
dependency 'org.sonarsource.slang:sonar-ruby-plugin:1.9.0.3429'
dependency 'org.sonarsource.slang:sonar-scala-plugin:1.9.0.3429'
dependency 'org.sonarsource.xml:sonar-xml-plugin:2.5.0.3376'
dependency 'org.sonarsource.iac:sonar-iac-plugin:1.5.0.1600'
dependency 'org.sonarsource.text:sonar-text-plugin:1.0.0.120'
// please keep this list alphabetically ordered
dependencySet(group: 'ch.qos.logback', version: '1.2.9') {
entry 'logback-access'
entry 'logback-classic'
entry 'logback-core'
}
dependency('commons-beanutils:commons-beanutils:1.9.4') {
exclude 'commons-logging:commons-logging'
}
dependency 'commons-codec:commons-codec:1.15'
dependency 'commons-dbutils:commons-dbutils:1.7'
dependency 'commons-io:commons-io:2.11.0'
dependency 'commons-lang:commons-lang:2.6'
imports { mavenBom 'com.fasterxml.jackson:jackson-bom:2.13.1' }
dependencySet(group: 'com.fasterxml.jackson.dataformat', version: '2.13.1') {
entry 'jackson-dataformat-cbor'
entry 'jackson-dataformat-smile'
entry 'jackson-dataformat-yaml'
}
dependency 'com.eclipsesource.minimal-json:minimal-json:0.9.5'
dependencySet(group: 'com.github.scribejava', version: '6.9.0') {
entry 'scribejava-apis'
entry 'scribejava-core'
}
dependency 'com.github.everit-org.json-schema:org.everit.json.schema:1.14.0'
// This project is no longer maintained and was forked
// by https://github.com/java-diff-utils/java-diff-utils
// (io.github.java-diff-utils:java-diff-utils).
dependency 'com.googlecode.java-diff-utils:diffutils:1.3.0'
dependency('com.googlecode.json-simple:json-simple:1.1.1') {
exclude 'junit:junit'
}
dependency 'io.prometheus:simpleclient:0.14.1'
dependency 'io.prometheus:simpleclient_common:0.14.1'
dependency 'io.prometheus:simpleclient_servlet:0.14.1'
dependency 'com.google.code.findbugs:jsr305:3.0.2'
dependency 'com.google.code.gson:gson:2.8.9'
dependency('com.google.guava:guava:31.0.1-jre') {
exclude 'com.google.errorprone:error_prone_annotations'
exclude 'com.google.guava:listenablefuture'
exclude 'com.google.j2objc:j2objc-annotations'
exclude 'org.checkerframework:checker-qual'
exclude 'org.codehaus.mojo:animal-sniffer-annotations'
}
dependency "com.google.protobuf:protobuf-java:${protobufVersion}"
dependency 'com.h2database:h2:2.1.210'
dependencySet(group: 'com.hazelcast', version: '4.2.4') {
entry 'hazelcast'
}
dependency 'com.hazelcast:hazelcast-kubernetes:2.2.3'
// Documentation must be updated if mssql-jdbc is updated: https://github.com/SonarSource/sonarqube/commit/03e4773ebf6cba854cdcf57a600095f65f4f53e7
dependency 'com.microsoft.sqlserver:mssql-jdbc:9.4.1.jre11'
dependency 'com.oracle.database.jdbc:ojdbc8:21.4.0.0.1'
dependency 'org.aspectj:aspectjtools:1.9.7'
// upgrade okhttp3 dependency kotlin to get rid of not exploitable CVE-2020-29582
dependency 'org.jetbrains.kotlin:kotlin-stdlib-common:1.6.10'
dependency 'org.jetbrains.kotlin:kotlin-stdlib:1.6.10'
dependencySet(group: 'com.squareup.okhttp3', version: '4.9.3') {
entry 'okhttp'
entry 'mockwebserver'
}
dependency 'org.json:json:20211205'
dependency 'com.tngtech.java:junit-dataprovider:1.13.1'
dependency 'info.picocli:picocli:3.6.1'
dependencySet(group: 'io.jsonwebtoken', version: '0.11.2') {
entry 'jjwt-api'
entry 'jjwt-impl'
entry 'jjwt-jackson'
}
dependency 'com.auth0:java-jwt:3.18.3'
dependency 'io.netty:netty-all:4.1.73.Final'
dependency 'com.sun.mail:javax.mail:1.6.2'
dependency 'javax.annotation:javax.annotation-api:1.3.2'
dependency 'javax.inject:javax.inject:1'
dependency 'javax.servlet:javax.servlet-api:3.1.0'
dependency 'javax.xml.bind:jaxb-api:2.3.1'
dependency 'junit:junit:4.13.2'
dependency 'org.junit.jupiter:junit-jupiter-api:5.8.2'
dependency 'org.xmlunit:xmlunit-core:2.9.0'
dependency 'org.xmlunit:xmlunit-matchers:2.9.0'
dependency 'net.jpountz.lz4:lz4:1.3.0'
dependency 'net.lightbody.bmp:littleproxy:1.1.0-beta-bmp-17'
dependency 'org.awaitility:awaitility:4.1.1'
dependency 'org.apache.commons:commons-csv:1.9.0'
dependency 'org.apache.commons:commons-email:1.5'
dependency 'org.apache.commons:commons-dbcp2:2.9.0'
dependency('org.apache.httpcomponents:httpclient:4.5.13'){
exclude 'commons-logging:commons-logging'
}
// Be aware that Log4j is used by Elasticsearch client
dependencySet(group: 'org.apache.logging.log4j', version: '2.17.1') {
entry 'log4j-core'
entry 'log4j-api'
entry 'log4j-to-slf4j'
}
dependencySet(group: 'org.apache.tomcat.embed', version: '8.5.73') {
entry 'tomcat-embed-core'
entry('tomcat-embed-jasper') {
exclude 'org.eclipse.jdt.core.compiler:ecj'
}
}
dependency 'org.assertj:assertj-core:3.22.0'
dependency 'org.assertj:assertj-guava:3.4.0'
dependency('org.codehaus.sonar:sonar-channel:4.2') {
exclude 'org.slf4j:slf4j-api'
}
dependency 'org.codehaus.sonar:sonar-classloader:1.0'
dependency 'com.fasterxml.staxmate:staxmate:2.4.0'
dependencySet(group: 'org.eclipse.jetty', version: '9.4.6.v20170531') {
entry 'jetty-proxy'
entry 'jetty-server'
entry 'jetty-servlet'
}
dependency('org.elasticsearch.client:elasticsearch-rest-high-level-client:7.17.1') {
exclude 'org.apache.logging.log4j:log4j-core'
}
dependency 'org.elasticsearch.plugin:transport-netty4-client:7.17.1'
dependency 'org.elasticsearch:mocksocket:1.2'
dependency 'org.codelibs.elasticsearch.module:analysis-common:7.17.1'
dependency 'org.eclipse.jgit:org.eclipse.jgit:5.13.0.202109080827-r'
dependency 'org.tmatesoft.svnkit:svnkit:1.10.4'
dependency 'org.hamcrest:hamcrest-all:1.3'
dependency 'org.jsoup:jsoup:1.14.3'
dependency 'org.mindrot:jbcrypt:0.4'
dependency('org.mockito:mockito-core:3.12.4') {
exclude 'org.hamcrest:hamcrest-core'
}
dependency 'org.mybatis:mybatis:3.5.9'
dependency 'org.nanohttpd:nanohttpd:2.3.1'
dependencySet(group: 'org.slf4j', version: '1.7.30') {
entry 'jcl-over-slf4j'
entry 'jul-to-slf4j'
entry 'log4j-over-slf4j'
entry 'slf4j-api'
}
dependency 'org.postgresql:postgresql:42.3.3'
dependency 'org.reflections:reflections:0.10.2'
dependency 'org.simpleframework:simple:4.1.21'
dependency 'org.sonarsource.orchestrator:sonar-orchestrator:3.37.0.87'
dependency 'org.sonarsource.update-center:sonar-update-center-common:1.23.0.723'
dependency('org.springframework:spring-context:5.3.15') {
exclude 'commons-logging:commons-logging'
}
dependency 'org.subethamail:subethasmtp:3.1.7'
dependency 'org.yaml:snakeyaml:1.30'
// please keep this list alphabetically ordered
}
}
// global exclusions
configurations.all {
// do not conflict with com.sun.mail:javax.mail
exclude group: 'javax.mail', module: 'mail'
}
tasks.withType(Javadoc) {
options.addStringOption('Xdoclint:none', '-quiet')
options.encoding = 'UTF-8'
doFirst {
options.addBooleanOption('-no-module-directories', true)
}
title = project.name + ' ' + versionWithoutBuildNumber
}
task sourcesJar(type: Jar, dependsOn: classes) {
archiveClassifier = 'sources'
from sourceSets.main.allSource
}
task javadocJar(type: Jar, dependsOn: javadoc) {
archiveClassifier = 'javadoc'
from javadoc.destinationDir
}
// generate code before opening project in IDE (Eclipse or Intellij)
task ide() {
// empty by default. Dependencies are added to the task
// when needed (see protobuf modules for example)
}
jacocoTestReport {
reports {
xml.required = true
csv.required = false
html.required = false
}
}
normalization {
runtimeClasspath {
// Following classpath resources contain volatile data that changes in each CI build (build number, commit id, time),
// so we exclude them from calculation of build cache key of test tasks:
ignore 'META-INF/MANIFEST.MF'
ignore 'sonar-api-version.txt'
ignore 'sq-version.txt'
}
}
ext.failedTests = []
test {
jvmArgs '-Dfile.encoding=UTF8'
maxHeapSize = '1G'
systemProperty 'java.awt.headless', true
testLogging {
events "skipped", "failed" // verbose log for failed and skipped tests (by default the name of the tests are not logged)
exceptionFormat 'full' // log the full stack trace (default is the 1st line of the stack trace)
}
jacoco {
enabled = true // do not disable recording of code coverage, so that remote Gradle cache entry can be used locally
includes = ['com.sonar.*', 'com.sonarsource.*', 'org.sonar.*', 'org.sonarqube.*', 'org.sonarsource.*']
}
if (project.hasProperty('maxParallelTests')) {
maxParallelForks = project.maxParallelTests as int
}
if (project.hasProperty('parallelTests')) {
// See https://guides.gradle.org/performance/#parallel_test_execution
maxParallelForks = Runtime.runtime.availableProcessors().intdiv(2) ?: 1
}
afterTest { descriptor, result ->
if (result.resultType == TestResult.ResultType.FAILURE) {
String failedTest = " ${descriptor.className} > ${descriptor.name}"
failedTests << failedTest
}
}
}
gradle.buildFinished {
if (!failedTests.empty) {
println "\nFailed tests:"
failedTests.each { failedTest ->
println failedTest
}
println ""
}
}
def protoMainSrc = 'src/main/protobuf'
def protoTestSrc = 'src/test/protobuf'
if (file(protoMainSrc).exists() || file(protoTestSrc).exists()) {
// protobuf must be applied after java
apply plugin: 'com.google.protobuf'
sourceSets.main.proto.srcDir protoMainSrc // in addition to the default 'src/main/proto'
sourceSets.test.proto.srcDir protoTestSrc // in addition to the default 'src/test/proto'
protobuf {
protoc {
artifact = "com.google.protobuf:protoc:${protobufVersion}"
}
}
jar {
exclude('**/*.proto')
}
idea {
module {
sourceDirs += file("${protobuf.generatedFilesBaseDir}/main/java")
testSourceDirs += file("${protobuf.generatedFilesBaseDir}/test/java")
generatedSourceDirs += file("${protobuf.generatedFilesBaseDir}/main/java")
generatedSourceDirs += file("${protobuf.generatedFilesBaseDir}/test/java")
}
}
ide.dependsOn(['generateProto', 'generateTestProto'])
}
if (official) {
jar {
// do not break incremental build on non official versions
manifest {
attributes(
'Version': "${version}",
'Implementation-Build': System.getenv('GIT_SHA1'),
'Build-Time': new Date().format("yyyy-MM-dd'T'HH:mm:ssZ")
)
}
}
}
license {
header = rootProject.file('HEADER')
strictCheck true
encoding = 'UTF-8'
mapping {
java = 'SLASHSTAR_STYLE'
js = 'SLASHSTAR_STYLE'
ts = 'SLASHSTAR_STYLE'
tsx = 'SLASHSTAR_STYLE'
css = 'SLASHSTAR_STYLE'
}
includes(['**/*.java', '**/*.js', '**/*.ts', '**/*.tsx', '**/*.css'])
}
tasks.withType(GenerateModuleMetadata) {
enabled = false
}
publishing {
publications {
mavenJava(MavenPublication) {
pom {
name = 'SonarQube'
description = project.description
url = 'http://www.sonarqube.org/'
organization {
name = 'SonarSource'
url = 'http://www.sonarsource.com'
}
licenses {
license {
name = 'GNU LGPL 3'
url = 'http://www.gnu.org/licenses/lgpl.txt'
distribution = 'repo'
}
}
scm {
url = 'https://github.com/SonarSource/sonarqube'
}
developers {
developer {
id = 'sonarsource-team'
name = 'SonarSource Team'
}
}
}
}
}
}
if (System.getenv('GITHUB_BRANCH') == "branch-nightly-build") {
tasks.withType(Test) {
configurations {
utMonitoring
}
dependencies {
testCompile project(":ut-monitoring")
utMonitoring 'org.aspectj:aspectjweaver:1.9.7'
}
doFirst {
ext {
aspectJWeaver = configurations.utMonitoring.resolvedConfiguration.resolvedArtifacts.find { it.name == 'aspectjweaver' }
}
jvmArgs "-javaagent:${aspectJWeaver.file}"
}
}
}
signing {
def signingKeyId = findProperty("signingKeyId")
def signingKey = findProperty("signingKey")
def signingPassword = findProperty("signingPassword")
useInMemoryPgpKeys(signingKeyId, signingKey, signingPassword)
required {
def branch = System.getenv()["GITHUB_BRANCH"]
return (branch in ['master', 'dogfood-on-next'] || branch ==~ 'branch-[\\d.]+') &&
gradle.taskGraph.hasTask(":artifactoryPublish")
}
sign publishing.publications
}
tasks.withType(Sign) {
onlyIf {
def branch = System.getenv()["GITHUB_BRANCH"]
return !artifactoryPublish.skip &&
(branch in ['master', 'dogfood-on-next'] || branch ==~ 'branch-[\\d.]+') &&
gradle.taskGraph.hasTask(":artifactoryPublish")
}
}
}
gradle.projectsEvaluated { gradle ->
// yarn_run tasks can't all run in parallel without random issues
// this script ensure all yarn_run tasks run sequentially
def yarnRunTasks = allprojects.findResults { it -> it.tasks.findByName('yarn_run') }
yarnRunTasks.drop(1).eachWithIndex { it, i -> it.mustRunAfter(yarnRunTasks[0..i]) }
}
ext.osAdaptiveCommand = { commands ->
def newCommands = []
if (System.properties['os.name'].toLowerCase().contains('windows')) {
newCommands = ['cmd', '/c']
}
newCommands.addAll(commands)
return newCommands
}
tasks.named('sonarqube') {
long taskStart
doFirst {
taskStart = System.currentTimeMillis()
}
doLast {
long taskDuration = System.currentTimeMillis() - taskStart
File outputFile = new File("/tmp/analysis-monitoring.log")
outputFile.append(JsonOutput.toJson([category: "Analysis", suite: "Standalone", operation: "total", duration: taskDuration]) + '\n')
}
}