aboutsummaryrefslogtreecommitdiffstats
path: root/server/sonar-db-dao/src/it
Commit message (Collapse)AuthorAgeFilesLines
* SCA-109 add version to IssueReleaseDetails and pass purl_in_use to ↵Havoc Pennington2 days1-31/+37
| | | | vulnerability details cloud API
* SCA-106 Return "createdAt" along with dependency risks.Tieg Zaharia3 days1-3/+6
| | | Co-authored-by: Havoc Pennington <havoc.pennington@sonarsource.com>
* SQRP-252 Purge SCA tables when a branch is deletedMadeline Cowie3 days1-0/+38
|
* SQRP-268 Adds endpoint to fetch a dependency risk, including vuln details.Tieg Zaharia4 days1-4/+34
| | | Co-authored-by: Havoc Pennington <hp@pobox.com>
* SONAR-24588 Search for releases with before and after instead of just the ↵Jeremy Katz6 days1-4/+4
| | | | beginning of the string
* SQRP-308 add the newInPullRequest filter to releases and risks endpointsHavoc Pennington6 days2-25/+49
| | | | Also, default it to true on pull requests.
* SQRP-308 add a new_in_pull_request column to sca_releases and sca_dependenciesHavoc Pennington6 days2-0/+4
|
* SQRP-275 Add counts of releases by package manager in releases endpointJeremy Katz8 days1-0/+19
| | | This will enable the frontend to know what package managers are in use by a project to show the correct things in the left filter bar
* SQRP-299 Add query with filter/sort to ScaIssuesReleasesDetailsDaoHavoc Pennington10 days1-1/+433
|
* SQRP-249 add ScaIssueReleaseDetailsDto and mapperHavoc Pennington10 days1-0/+90
| | | | | | | | | | | | | | | | This is used to query SCA issues for a single analysis with all the necessary tables joined to it to get the full issue context. SQRP-301 rename DbTester.getIssuesWithScaDbTester to getScaIssuesReleasesDetailsDbTester SQRP-301 rename DbClient.issuesWithScaDao to scaIssuesReleasesDao SQRP-301 add better doc comment to ScaIssueReleaseDetailsDto on meaning of identity fields in sca_issues_releases dbtester, fix to work after separating new/insert SQRP-296 port ScaIssueReleaseDetails to query cve_ids not title
* SQRP-292 Add sca_issues_releasesTravis Collins10 days1-0/+109
| | | | | | | | SQRP-293 add sca_issues_releases.severity column SQRP-292 Update sca_issues_releases Dao to support persisting SQRP-300 Add sca_issues_releases.severity_sort_key
* SQRP-246 Register a UUID for SCA issues in sca_issues tableHavoc Pennington10 days2-0/+275
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This gives each issue a UUID that spans projects & analyses. SQRP-246 remove "get" from DbClient getter for sca issues DAO This wasn't following the naming convention. SQRP-287 add "IfApplicable" methods to ScaIssue These handle two things: * blank values become Optional.empty instead of junk * allows us to get all applicable values from a ScaIssue reference without type-casting. SQRP-287 add ScaIssuesDbTester Utility methods for ScaIssues testing SQRP-287 use a magic string value instead of empty string in ScaIssueDto Because Oracle considers empty string to be a synonym for null. SQRP-287 ScaIssuesDbTester vary the license saved in test issues SQRP-247 add more unit tests for ScaIssueDto SQRP-287 rename ScaIssue.titleIfApplicable => vulnerabilityTitleIfApplicable SQRP-246 make assertColumnDefinition work with DECIMAL on H2 SQRP-293 add base_severity to sca_vulnerability_issues This is the severity prior to any project-specific factors such as reachability. SQRP-293 increase ScaIssue test coverage SQRP-246 Add ScaIssueDto.Builder SQRP-246 Use a short placeholder CVE title, not giant description SQRP-246 Add toString to ScaIssue subtypes in sca_issues dbtester, separate new from insert SQRP-296 replace sca_vulnerability_issues.title with cwe_ids Replace title with cweIds in ScaIssue Remove ScaIssueFactory to be put back with IssuesReleases Replace title with cweids in the steps Change severity to INFO, LOW, MEDIUM, HIGH
* SCA-56 Run "reformat code" on SCA filesHavoc Pennington2025-02-281-1/+0
|
* SQRP-191 Ingest and persist the new "chains" field on each dependencyTieg Zaharia2025-02-281-2/+2
| | | Co-authored-by: Travis Collins <travistx@gmail.com>
* SQRP-156 A frontend-used API is created that returns a CycloneDX SBOM for a ↵John Bintz2025-02-281-8/+4
| | | | | project Co-authored-by: Antoine Vinot <antoine.vinot@sonarsource.com>
* SQRP-242 Add releases endpointsTravis Collins2025-02-282-0/+32
|
* SQRP-191 add new "sca_dependencies.chains" columnTieg Zaharia2025-02-191-0/+2
|
* SQRP-221 Add sca_releases table splitting out part of sca_dependenciesHavoc Pennington2025-02-192-46/+292
| | | | | | | | This will allow us to do paginated queries of releases instead of dependencies. In this commit, the behavior of the dependencies endpoint is not changed; this commit sets it up to be change-able, but just keeps it the same for the time being.
* SQRP-188 Add filtering to "search" dependencies REST APIJavier García Orduña2025-02-191-50/+82
|
* SQRP-140 Expose dependency details with new REST APIsJavier García Orduña2025-02-191-183/+0
|
* SQRP-172 fix typo in selectByUuid in ScaDependenciesMapperHavoc Pennington2025-02-191-0/+9
|
* SQRP-138 Create the sca_dependencies database tableHavoc Pennington2025-02-191-0/+198
|
* SQRP-154 Cleanup leftovers from FOSSAJavier García Orduña2025-02-044-267/+0
|
* SONAR-24216 Optimize querying of measures on startup indexingEric Giffon2025-01-281-1/+1
|
* SONAR-23122 Add telemetry to async issue index creation at startup.Steve Marion2025-01-101-0/+54
|
* SONAR-19225 Drop BCRYPT hash method for user passwordsMatteo Mara2025-01-092-3/+3
|
* SONAR-23711 Retrieve rules based on modeOrlovAlexander2025-01-092-0/+58
|
* SONAR-24146 Update license headers for 2025Matteo Mara2025-01-09118-118/+118
|
* SONAR-14367 Add new field to ProjectAlmSettingDto and update queriesJacek Poreda2025-01-091-5/+31
|
* SONAR-24122 Fix application refresh not refreshing referencersDuarte Meneses2025-01-061-13/+1
| | | Co-authored-by: Cody Simms <cody.simms@sonarsource.com>
* SONAR-23119 Create 'migration_logs' tableAlain Kermis2025-01-031-0/+79
|
* SONAR-23978 Detect AI CodeDejan Milisavljevic2024-12-201-0/+22
|
* SONAR-23984 Add Scheduler to fetch information about Copilot usageLéo Geoffroy2024-12-201-0/+66
|
* SONAR-23978 Add DAO for user_ai_tool_usages tableLéo Geoffroy2024-12-201-0/+82
|
* SONAR-24057 Optimize querying of branch measures to only load required ↵Eric Giffon2024-12-202-173/+40
| | | | measures in memory
* SONAR-24004 Replace lambda with method referenceJulien Camus2024-12-182-19/+14
|
* SONAR-22998 fetch active rules with a dedicated endpointPierre Guillot2024-12-181-8/+66
| | | Co-authored-by: Julien HENRY <julien.henry@sonarsource.com>
* SONAR-23734 Total number of applications TelemetryOrlovAlexander2024-12-181-0/+10
|
* SONAR-23738 Portfolio and Subportfolio selection mode telemetryOrlovAlexander2024-12-181-0/+28
|
* SONAR-23688 Index active rules impactsDejan Milisavljevic2024-12-061-16/+26
|
* SONAR-23731 Portfolio report telemetryOrlovAlexander2024-12-061-2/+10
|
* SONAR-23512 Project report telemetryOrlovAlexander2024-12-061-0/+24
|
* SONAR-23736 Add application report TelemetryOrlovAlexander2024-12-041-0/+26
|
* SONAR-23619 Add Sonar way for AI Code Quality GateJacek2024-11-292-6/+22
|
* SONAR-23619 Rename ai_code_assurance_column (#12320)Anita Stanisz2024-11-291-12/+12
|
* SONAR-23619 Add 'isAiCodeSupported' flag to show and list endpoints of ↵Jacek Poreda2024-11-291-0/+9
| | | | Quality Gates
* SONAR-23619 Add DB migration for 'quality_gates' table to add ↵Jacek Poreda2024-11-291-0/+1
| | | | 'ai_code_supported' boolean flag
* SONAR-23637 Export of CSV finding files includes impactsOrlovAlexander2024-11-271-1/+6
|
* SONAR-23649 Conditions mismatch notification should be enabled by default ↵Léo Geoffroy2024-11-261-56/+75
| | | | for Quality gate administrators
* CODEFIX-192 Add ai code fix enablement to audit logs (#12238)Serhat Yenican2024-11-191-4/+8
|
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-15 00:32:08 +0000