Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | SONAR-24520 Replace usages of Plugin API RuleType with internal Enum | antoine.vinot | 2025-03-27 | 4 | -4/+4 |
| | |||||
* | SCA-182: core-extension-sca: move all sca db classes to sca-application | Havoc Pennington | 2025-03-26 | 14 | -847/+0 |
| | |||||
* | SQRP-314 SPDX SBOMs provide a licenseDeclared if we have one from upstream ↵ | Madeline Cowie | 2025-03-17 | 2 | -0/+4 |
| | | | | (#13168) | ||||
* | SCA-131 store sca_dependencies.production_scope and add to endpoints (#13191) | Havoc Pennington | 2025-03-17 | 3 | -1/+40 |
| | |||||
* | SCA-134 reduce cut-and-paste of field list for Release and Issue (#13190) | Havoc Pennington | 2025-03-17 | 1 | -11/+88 |
| | |||||
* | SCA-124 add a filter for "direct" on sca/issues-releases endpoint (#13184) | Havoc Pennington | 2025-03-17 | 1 | -1/+1 |
| | |||||
* | SCA-109 add version to IssueReleaseDetails and pass purl_in_use to ↵ | Havoc Pennington | 2025-03-12 | 1 | -0/+2 |
| | | | | vulnerability details cloud API | ||||
* | SCA-106 Return "createdAt" along with dependency risks. | Tieg Zaharia | 2025-03-11 | 1 | -1/+2 |
| | | | Co-authored-by: Havoc Pennington <havoc.pennington@sonarsource.com> | ||||
* | SQRP-308 add the newInPullRequest filter to releases and risks endpoints | Havoc Pennington | 2025-03-08 | 2 | -1/+2 |
| | | | | Also, default it to true on pull requests. | ||||
* | SQRP-308 add a new_in_pull_request column to sca_releases and sca_dependencies | Havoc Pennington | 2025-03-08 | 2 | -0/+9 |
| | |||||
* | SCA-97 pull the identity concept out of PersistScalStepImpl and into DTOs ↵ | Havoc Pennington | 2025-03-07 | 3 | -1/+94 |
| | | | | | | | themselves This allows it to be more consistent/documented and reusable (and helps us remember to update it when needed). | ||||
* | SQRP-299 Add query with filter/sort to ScaIssuesReleasesDetailsDao | Havoc Pennington | 2025-03-04 | 2 | -0/+99 |
| | |||||
* | SQRP-292 Add sca_issues_releases | Travis Collins | 2025-03-04 | 3 | -2/+40 |
| | | | | | | | | SQRP-293 add sca_issues_releases.severity column SQRP-292 Update sca_issues_releases Dao to support persisting SQRP-300 Add sca_issues_releases.severity_sort_key | ||||
* | SQRP-246 Register a UUID for SCA issues in sca_issues table | Havoc Pennington | 2025-03-04 | 5 | -0/+252 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This gives each issue a UUID that spans projects & analyses. SQRP-246 remove "get" from DbClient getter for sca issues DAO This wasn't following the naming convention. SQRP-287 add "IfApplicable" methods to ScaIssue These handle two things: * blank values become Optional.empty instead of junk * allows us to get all applicable values from a ScaIssue reference without type-casting. SQRP-287 add ScaIssuesDbTester Utility methods for ScaIssues testing SQRP-287 use a magic string value instead of empty string in ScaIssueDto Because Oracle considers empty string to be a synonym for null. SQRP-287 ScaIssuesDbTester vary the license saved in test issues SQRP-247 add more unit tests for ScaIssueDto SQRP-287 rename ScaIssue.titleIfApplicable => vulnerabilityTitleIfApplicable SQRP-246 make assertColumnDefinition work with DECIMAL on H2 SQRP-293 add base_severity to sca_vulnerability_issues This is the severity prior to any project-specific factors such as reachability. SQRP-293 increase ScaIssue test coverage SQRP-246 Add ScaIssueDto.Builder SQRP-246 Use a short placeholder CVE title, not giant description SQRP-246 Add toString to ScaIssue subtypes in sca_issues dbtester, separate new from insert SQRP-296 replace sca_vulnerability_issues.title with cwe_ids Replace title with cweIds in ScaIssue Remove ScaIssueFactory to be put back with IssuesReleases Replace title with cweids in the steps Change severity to INFO, LOW, MEDIUM, HIGH | ||||
* | SCA-56 Run "reformat code" on SCA files | Havoc Pennington | 2025-02-28 | 2 | -2/+3 |
| | |||||
* | SQRP-191 Ingest and persist the new "chains" field on each dependency | Tieg Zaharia | 2025-02-28 | 2 | -0/+5 |
| | | | Co-authored-by: Travis Collins <travistx@gmail.com> | ||||
* | SQRP-221 Add sca_releases table splitting out part of sca_dependencies | Havoc Pennington | 2025-02-19 | 4 | -10/+118 |
| | | | | | | | | This will allow us to do paginated queries of releases instead of dependencies. In this commit, the behavior of the dependencies endpoint is not changed; this commit sets it up to be change-able, but just keeps it the same for the time being. | ||||
* | SQRP-188 Add filtering to "search" dependencies REST API | Javier García Orduña | 2025-02-19 | 1 | -0/+39 |
| | |||||
* | SQRP-138 Create the sca_dependencies database table | Havoc Pennington | 2025-02-19 | 2 | -0/+79 |
| | |||||
* | SONAR-24146 Update license headers for 2025 | Matteo Mara | 2025-01-09 | 92 | -92/+92 |
| | |||||
* | SONAR-24021 Invoke method(s) only conditionally | Julien Camus | 2024-12-27 | 3 | -0/+68 |
| | |||||
* | SONAR-23990 Replace with text block | Julien Camus | 2024-12-19 | 1 | -2/+14 |
| | |||||
* | SONAR-24004 Replace lambda with method reference | Julien Camus | 2024-12-18 | 2 | -15/+6 |
| | |||||
* | SONAR-23738 Portfolio and Subportfolio selection mode telemetry | OrlovAlexander | 2024-12-18 | 1 | -0/+37 |
| | |||||
* | SONAR-23512 Project report telemetry | OrlovAlexander | 2024-12-06 | 1 | -0/+38 |
| | |||||
* | SONAR-23063, SONAR-23804 Add Prioritized rule flag to import/export and fix ↵ | Viktor Vorona | 2024-12-04 | 1 | -0/+3 |
| | | | | first analysis bug | ||||
* | CODEFIX-192 Add ai code fix enablement to audit logs (#12238) | Serhat Yenican | 2024-11-19 | 1 | -0/+48 |
| | |||||
* | SONAR-23363 handle manual impact flag during project analysis | Léo Geoffroy | 2024-11-11 | 1 | -15/+17 |
| | |||||
* | SONAR-23427 Stop relying on Qualifiers, Scopes and ResourceType from the ↵ | Julien HENRY | 2024-10-24 | 4 | -13/+12 |
| | | | | plugin API | ||||
* | SONAR-23250 Update rule activator to support impact severity overrides | Léo Geoffroy | 2024-10-16 | 1 | -0/+20 |
| | |||||
* | SONAR-23250 Add facilitator method for impacts | Léo Geoffroy | 2024-10-16 | 1 | -0/+56 |
| | |||||
* | NO-JIRA Remove new code issues resulting from the update of the deprecated ↵ | Matteo Mara | 2024-10-14 | 2 | -3/+3 |
| | | | | methods. | ||||
* | NO-JIRA Stop using deprecated methods from RandomStringUtils | Matteo Mara | 2024-10-14 | 9 | -73/+72 |
| | |||||
* | SONAR-22872 Update DB populator to write JSON measures | Eric Giffon | 2024-10-09 | 1 | -3/+3 |
| | |||||
* | SONAR-22925 Import/export of JSON measures | Claire Villard | 2024-10-09 | 1 | -645/+0 |
| | |||||
* | SONAR-22873 Read JSON measures (#11683) | Eric Giffon | 2024-10-09 | 3 | -35/+404 |
| | | | | Co-authored-by: Claire Villard <claire.villard@sonarsource.com> | ||||
* | SONAR-22872 Live update of JSON measures | Eric Giffon | 2024-10-09 | 3 | -0/+250 |
| | |||||
* | SONAR-22872 CE step to persist measures in JSON format | Eric Giffon | 2024-10-09 | 3 | -0/+229 |
| | |||||
* | NO-JIRA remove metrics usage that have been removed from codebase. | Steve Marion | 2024-09-19 | 1 | -3/+0 |
| | |||||
* | SONAR-22649 Create DB populator for creating generated data | Alain Kermis | 2024-09-19 | 1 | -0/+455 |
| | |||||
* | SONAR-22874 Rename Measure classes to ProjectMeasure | Eric Giffon | 2024-08-28 | 2 | -59/+2 |
| | |||||
* | SONAR-22479 Implement sending new telemetry metrics | Alain Kermis | 2024-07-24 | 1 | -0/+39 |
| | |||||
* | SONAR-22224 Add prioritizedRule flag to Issues index | OrlovAlexander | 2024-06-03 | 1 | -3/+4 |
| | |||||
* | SONAR-22252 Update IssueDto, ActiveRuleDto and corresponding mappers | OrlovAlexander | 2024-06-03 | 1 | -0/+3 |
| | |||||
* | SONAR-21821 Add monorepo related project 'CreationMethod's | Wojtek Wajerowicz | 2024-03-28 | 1 | -9/+12 |
| | |||||
* | SONAR-21452 move from commons-lang:commons-lang to ↵ | Matteo Mara | 2024-03-16 | 13 | -16/+16 |
| | | | | org.apache.commons:commons-lang3 | ||||
* | SONAR-21647 Migrate DAO IT (#10676) | OrlovAlexander | 2024-02-22 | 81 | -758/+749 |
| | |||||
* | SONAR-21165 Remove uuid from issues_impacts and rules_default_impacts table | Léo Geoffroy | 2024-02-16 | 2 | -4/+1 |
| | |||||
* | SONAR-21476 Fix JFrog authentication with vault | Jacek Poreda | 2024-01-24 | 1 | -0/+1 |
| | |||||
* | SONAR-21280 Use IssueStatus from plugin-api instead and remove old one | Léo Geoffroy | 2024-01-19 | 2 | -3/+2 |
| |