Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | NO-JIRA MMF-4410 update regulatory reportsHEADmaster | Daniel Nagy | 11 hours | 3 | -2/+13 |
| | | | | | | MMF-4410 update regulatory reports (14365) SONAR-24940 update regulatory report (14289) SONAR-25544 update csv reports (14367) | ||||
* | SONAR-25454 Implement repository URL-based project bindings fuzzy search | Julien Camus | 2025-07-08 | 3 | -2/+92 |
| | |||||
* | SONAR-24780 Add userId parameter to GET /authorizations/groups | Aurelien Poscia | 2025-05-12 | 2 | -3/+34 |
| | |||||
* | SCA-352 add AnalyzedComponent.selectReferencingBranches | Havoc Pennington | 2025-05-06 | 3 | -0/+15 |
| | |||||
* | SCA-239 purge sca issues releases changes table | Havoc Pennington | 2025-05-02 | 3 | -2/+16 |
| | |||||
* | SCA-277 add deleteScaLicenseProfiles to PurgeDao#deleteProject | Matt Pace | 2025-05-01 | 4 | -0/+12 |
| | |||||
* | SCA-324 save sca_analyses row for each SCA analysis | Havoc Pennington | 2025-04-30 | 3 | -0/+11 |
| | |||||
* | SONAR-24871 Add purge of architecture graphs when deleting a branch. | Steve Marion | 2025-04-29 | 4 | -0/+13 |
| | | | | Signed-off-by: Steve Marion <steve.marion@sonarsource.com> | ||||
* | SONAR-24712 Computation of portfolios with more than 1000 projects fails on ↵ | Duarte Meneses | 2025-03-27 | 1 | -1/+1 |
| | | | | Oracle and MSSQL | ||||
* | SONAR-24667 Stop relying on UserRole from the plugin API | Julien HENRY | 2025-03-27 | 13 | -14/+173 |
| | |||||
* | SONAR-24520 Replace usages of Plugin API RuleType with internal Enum | antoine.vinot | 2025-03-27 | 5 | -9/+9 |
| | |||||
* | SCA-182: core-extension-sca: move all sca db classes to sca-application | Havoc Pennington | 2025-03-26 | 42 | -3341/+0 |
| | |||||
* | SONAR-24623 Remove the support of ProfileExporter and ProfileImporter | Julien HENRY | 2025-03-18 | 1 | -3/+2 |
| | |||||
* | SONAR-24602 Add Telemetry for architecture visualization usage. | Steve Marion | 2025-03-18 | 3 | -0/+16 |
| | |||||
* | SQRP-333 Sort issues for a single release by descending severity | Havoc Pennington | 2025-03-18 | 1 | -16/+28 |
| | |||||
* | SQRP-314 SPDX SBOMs provide a licenseDeclared if we have one from upstream ↵ | Madeline Cowie | 2025-03-17 | 3 | -1/+16 |
| | | | | (#13168) | ||||
* | SCA-131 store sca_dependencies.production_scope and add to endpoints (#13191) | Havoc Pennington | 2025-03-17 | 6 | -3/+87 |
| | |||||
* | SCA-134 reduce cut-and-paste of field list for Release and Issue (#13190) | Havoc Pennington | 2025-03-17 | 11 | -216/+336 |
| | |||||
* | SCA-124 add a filter for "direct" on sca/issues-releases endpoint (#13184) | Havoc Pennington | 2025-03-17 | 2 | -1/+15 |
| | |||||
* | SCA-125 Perf: releases endpoint (#13178) | Travis Collins | 2025-03-17 | 4 | -13/+7 |
| | |||||
* | SCA-107 Add new IssueResource to ReleaseResource payload. | Tieg Zaharia | 2025-03-13 | 3 | -0/+20 |
| | | | Co-authored-by: Havoc Pennington <havoc.pennington@sonarsource.com> | ||||
* | SCA-109 add version to IssueReleaseDetails and pass purl_in_use to ↵ | Havoc Pennington | 2025-03-12 | 2 | -2/+23 |
| | | | | vulnerability details cloud API | ||||
* | SCA-106 Return "createdAt" along with dependency risks. | Tieg Zaharia | 2025-03-11 | 2 | -4/+22 |
| | | | Co-authored-by: Havoc Pennington <havoc.pennington@sonarsource.com> | ||||
* | SQRP-252 Purge SCA tables when a branch is deleted | Madeline Cowie | 2025-03-11 | 4 | -0/+37 |
| | |||||
* | SONAR-24413 Create GET /feature-enablement endpoint | Serhat Yenican | 2025-03-10 | 3 | -0/+15 |
| | |||||
* | SQRP-268 Adds endpoint to fetch a dependency risk, including vuln details. | Tieg Zaharia | 2025-03-10 | 4 | -1/+21 |
| | | | Co-authored-by: Havoc Pennington <hp@pobox.com> | ||||
* | ScaDependencyDto: fix some Nullable annotations | Havoc Pennington | 2025-03-08 | 1 | -11/+9 |
| | |||||
* | SONAR-24588 Search for releases with before and after instead of just the ↵ | Jeremy Katz | 2025-03-08 | 1 | -2/+2 |
| | | | | beginning of the string | ||||
* | SQRP-308 add the newInPullRequest filter to releases and risks endpoints | Havoc Pennington | 2025-03-08 | 7 | -4/+32 |
| | | | | Also, default it to true on pull requests. | ||||
* | SQRP-308 add a new_in_pull_request column to sca_releases and sca_dependencies | Havoc Pennington | 2025-03-08 | 4 | -12/+39 |
| | |||||
* | SCA-97 pull the identity concept out of PersistScalStepImpl and into DTOs ↵ | Havoc Pennington | 2025-03-07 | 3 | -0/+93 |
| | | | | | | | themselves This allows it to be more consistent/documented and reusable (and helps us remember to update it when needed). | ||||
* | SQRP-275 Add counts of releases by package manager in releases endpoint | Jeremy Katz | 2025-03-06 | 4 | -0/+37 |
| | | | This will enable the frontend to know what package managers are in use by a project to show the correct things in the left filter bar | ||||
* | SQRP-299 Add query with filter/sort to ScaIssuesReleasesDetailsDao | Havoc Pennington | 2025-03-04 | 5 | -2/+375 |
| | |||||
* | SQRP-249 add ScaIssueReleaseDetailsDto and mapper | Havoc Pennington | 2025-03-04 | 7 | -0/+198 |
| | | | | | | | | | | | | | | | | This is used to query SCA issues for a single analysis with all the necessary tables joined to it to get the full issue context. SQRP-301 rename DbTester.getIssuesWithScaDbTester to getScaIssuesReleasesDetailsDbTester SQRP-301 rename DbClient.issuesWithScaDao to scaIssuesReleasesDao SQRP-301 add better doc comment to ScaIssueReleaseDetailsDto on meaning of identity fields in sca_issues_releases dbtester, fix to work after separating new/insert SQRP-296 port ScaIssueReleaseDetails to query cve_ids not title | ||||
* | SQRP-292 Add sca_issues_releases | Travis Collins | 2025-03-04 | 7 | -0/+254 |
| | | | | | | | | SQRP-293 add sca_issues_releases.severity column SQRP-292 Update sca_issues_releases Dao to support persisting SQRP-300 Add sca_issues_releases.severity_sort_key | ||||
* | SQRP-246 Register a UUID for SCA issues in sca_issues table | Havoc Pennington | 2025-03-04 | 16 | -0/+838 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This gives each issue a UUID that spans projects & analyses. SQRP-246 remove "get" from DbClient getter for sca issues DAO This wasn't following the naming convention. SQRP-287 add "IfApplicable" methods to ScaIssue These handle two things: * blank values become Optional.empty instead of junk * allows us to get all applicable values from a ScaIssue reference without type-casting. SQRP-287 add ScaIssuesDbTester Utility methods for ScaIssues testing SQRP-287 use a magic string value instead of empty string in ScaIssueDto Because Oracle considers empty string to be a synonym for null. SQRP-287 ScaIssuesDbTester vary the license saved in test issues SQRP-247 add more unit tests for ScaIssueDto SQRP-287 rename ScaIssue.titleIfApplicable => vulnerabilityTitleIfApplicable SQRP-246 make assertColumnDefinition work with DECIMAL on H2 SQRP-293 add base_severity to sca_vulnerability_issues This is the severity prior to any project-specific factors such as reachability. SQRP-293 increase ScaIssue test coverage SQRP-246 Add ScaIssueDto.Builder SQRP-246 Use a short placeholder CVE title, not giant description SQRP-246 Add toString to ScaIssue subtypes in sca_issues dbtester, separate new from insert SQRP-296 replace sca_vulnerability_issues.title with cwe_ids Replace title with cweIds in ScaIssue Remove ScaIssueFactory to be put back with IssuesReleases Replace title with cweids in the steps Change severity to INFO, LOW, MEDIUM, HIGH | ||||
* | SONAR-24436 Only pass 2 params to CONCAT() | Duarte Meneses | 2025-03-04 | 1 | -1/+1 |
| | | | Co-authored-by: Cody Simms <cody.simms@sonarsource.com> | ||||
* | SQRP-294 use ListOfListOfStringsTypeHandler only for a single mapper, not ↵ | Havoc Pennington | 2025-03-01 | 3 | -24/+33 |
| | | | | globally | ||||
* | SQRP-279 Don't say SCA analysis | Bill Nottingham | 2025-02-28 | 1 | -1/+1 |
| | |||||
* | SCA-56 Run "reformat code" on SCA files | Havoc Pennington | 2025-02-28 | 6 | -56/+54 |
| | |||||
* | SQRP-191 Ingest and persist the new "chains" field on each dependency | Tieg Zaharia | 2025-02-28 | 6 | -19/+113 |
| | | | Co-authored-by: Travis Collins <travistx@gmail.com> | ||||
* | SQRP-156 A frontend-used API is created that returns a CycloneDX SBOM for a ↵ | John Bintz | 2025-02-28 | 1 | -1/+6 |
| | | | | | project Co-authored-by: Antoine Vinot <antoine.vinot@sonarsource.com> | ||||
* | SQRP-242 Add releases endpoints | Travis Collins | 2025-02-28 | 4 | -2/+91 |
| | |||||
* | SQRP-221 Add sca_releases table splitting out part of sca_dependencies | Havoc Pennington | 2025-02-19 | 11 | -118/+589 |
| | | | | | | | | This will allow us to do paginated queries of releases instead of dependencies. In this commit, the behavior of the dependencies endpoint is not changed; this commit sets it up to be change-able, but just keeps it the same for the time being. | ||||
* | SQRP-188 Add filtering to "search" dependencies REST API | Javier García Orduña | 2025-02-19 | 2 | -8/+20 |
| | |||||
* | SQRP-140 Expose dependency details with new REST APIs | Javier García Orduña | 2025-02-19 | 8 | -229/+2 |
| | |||||
* | SQRP-172 fix typo in selectByUuid in ScaDependenciesMapper | Havoc Pennington | 2025-02-19 | 1 | -1/+1 |
| | |||||
* | SQRP-138 Create the sca_dependencies database table | Havoc Pennington | 2025-02-19 | 10 | -0/+501 |
| | |||||
* | SQRP-154 Cleanup leftovers from FOSSA | Javier García Orduña | 2025-02-04 | 17 | -474/+1 |
| | |||||
* | SONAR-24216 Optimize querying of measures on startup indexing | Eric Giffon | 2025-01-28 | 1 | -80/+22 |
| |