Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | SONAR-24780 Add userId parameter to GET /authorizations/groups | Aurelien Poscia | 2025-05-12 | 1 | -1/+1 |
| | |||||
* | SONAR-24667 Stop relying on UserRole from the plugin API | Julien HENRY | 2025-03-27 | 3 | -15/+80 |
| | |||||
* | SONAR-24520 Replace usages of Plugin API RuleType with internal Enum | antoine.vinot | 2025-03-27 | 3 | -6/+6 |
| | |||||
* | SCA-182: core-extension-sca: move all sca db classes to sca-application | Havoc Pennington | 2025-03-26 | 6 | -497/+0 |
| | |||||
* | SQRP-314 SPDX SBOMs provide a licenseDeclared if we have one from upstream ↵ | Madeline Cowie | 2025-03-17 | 1 | -0/+1 |
| | | | | (#13168) | ||||
* | SCA-137 de-duplicate release ids in searching for issues-releases (#13196) | Havoc Pennington | 2025-03-17 | 1 | -10/+19 |
| | |||||
* | SONAR-24514 add architecture core-extension and Dao. | Steve Marion | 2025-03-17 | 1 | -0/+4 |
| | |||||
* | SCA-131 store sca_dependencies.production_scope and add to endpoints (#13191) | Havoc Pennington | 2025-03-17 | 2 | -11/+52 |
| | |||||
* | SCA-134 reduce cut-and-paste of field list for Release and Issue (#13190) | Havoc Pennington | 2025-03-17 | 5 | -11/+102 |
| | |||||
* | SCA-125 Perf: releases endpoint (#13178) | Travis Collins | 2025-03-17 | 1 | -14/+0 |
| | |||||
* | SCA-109 add version to IssueReleaseDetails and pass purl_in_use to ↵ | Havoc Pennington | 2025-03-12 | 1 | -4/+5 |
| | | | | vulnerability details cloud API | ||||
* | SCA-106 Return "createdAt" along with dependency risks. | Tieg Zaharia | 2025-03-11 | 1 | -1/+2 |
| | | | Co-authored-by: Havoc Pennington <havoc.pennington@sonarsource.com> | ||||
* | SQRP-268 Adds endpoint to fetch a dependency risk, including vuln details. | Tieg Zaharia | 2025-03-10 | 1 | -1/+1 |
| | | | Co-authored-by: Havoc Pennington <hp@pobox.com> | ||||
* | SQRP-308 add the newInPullRequest filter to releases and risks endpoints | Havoc Pennington | 2025-03-08 | 1 | -13/+11 |
| | | | | Also, default it to true on pull requests. | ||||
* | SQRP-308 add a new_in_pull_request column to sca_releases and sca_dependencies | Havoc Pennington | 2025-03-08 | 2 | -0/+2 |
| | |||||
* | SCA-97 make ScaDependenciesDbTester.newScaDependencyDto static | Havoc Pennington | 2025-03-07 | 1 | -13/+13 |
| | |||||
* | SQRP-299 Add query with filter/sort to ScaIssuesReleasesDetailsDao | Havoc Pennington | 2025-03-04 | 1 | -13/+50 |
| | |||||
* | SQRP-249 add ScaIssueReleaseDetailsDto and mapper | Havoc Pennington | 2025-03-04 | 2 | -0/+79 |
| | | | | | | | | | | | | | | | | This is used to query SCA issues for a single analysis with all the necessary tables joined to it to get the full issue context. SQRP-301 rename DbTester.getIssuesWithScaDbTester to getScaIssuesReleasesDetailsDbTester SQRP-301 rename DbClient.issuesWithScaDao to scaIssuesReleasesDao SQRP-301 add better doc comment to ScaIssueReleaseDetailsDto on meaning of identity fields in sca_issues_releases dbtester, fix to work after separating new/insert SQRP-296 port ScaIssueReleaseDetails to query cve_ids not title | ||||
* | SQRP-246 Register a UUID for SCA issues in sca_issues table | Havoc Pennington | 2025-03-04 | 3 | -10/+93 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This gives each issue a UUID that spans projects & analyses. SQRP-246 remove "get" from DbClient getter for sca issues DAO This wasn't following the naming convention. SQRP-287 add "IfApplicable" methods to ScaIssue These handle two things: * blank values become Optional.empty instead of junk * allows us to get all applicable values from a ScaIssue reference without type-casting. SQRP-287 add ScaIssuesDbTester Utility methods for ScaIssues testing SQRP-287 use a magic string value instead of empty string in ScaIssueDto Because Oracle considers empty string to be a synonym for null. SQRP-287 ScaIssuesDbTester vary the license saved in test issues SQRP-247 add more unit tests for ScaIssueDto SQRP-287 rename ScaIssue.titleIfApplicable => vulnerabilityTitleIfApplicable SQRP-246 make assertColumnDefinition work with DECIMAL on H2 SQRP-293 add base_severity to sca_vulnerability_issues This is the severity prior to any project-specific factors such as reachability. SQRP-293 increase ScaIssue test coverage SQRP-246 Add ScaIssueDto.Builder SQRP-246 Use a short placeholder CVE title, not giant description SQRP-246 Add toString to ScaIssue subtypes in sca_issues dbtester, separate new from insert SQRP-296 replace sca_vulnerability_issues.title with cwe_ids Replace title with cweIds in ScaIssue Remove ScaIssueFactory to be put back with IssuesReleases Replace title with cweids in the steps Change severity to INFO, LOW, MEDIUM, HIGH | ||||
* | SCA-56 Run "reformat code" on SCA files | Havoc Pennington | 2025-02-28 | 1 | -10/+9 |
| | |||||
* | SQRP-191 Ingest and persist the new "chains" field on each dependency | Tieg Zaharia | 2025-02-28 | 1 | -0/+2 |
| | | | Co-authored-by: Travis Collins <travistx@gmail.com> | ||||
* | SQRP-221 Add sca_releases table splitting out part of sca_dependencies | Havoc Pennington | 2025-02-19 | 3 | -22/+101 |
| | | | | | | | | This will allow us to do paginated queries of releases instead of dependencies. In this commit, the behavior of the dependencies endpoint is not changed; this commit sets it up to be change-able, but just keeps it the same for the time being. | ||||
* | SQRP-188 Add filtering to "search" dependencies REST API | Javier García Orduña | 2025-02-19 | 1 | -39/+33 |
| | |||||
* | SQRP-140 Expose dependency details with new REST APIs | Javier García Orduña | 2025-02-19 | 2 | -71/+2 |
| | |||||
* | SQRP-138 Create the sca_dependencies database table | Havoc Pennington | 2025-02-19 | 2 | -0/+92 |
| | |||||
* | SQRP-154 Cleanup leftovers from FOSSA | Javier García Orduña | 2025-02-04 | 1 | -6/+0 |
| | |||||
* | SONAR-24146 Update license headers for 2025 | Matteo Mara | 2025-01-09 | 54 | -54/+54 |
| | |||||
* | SONAR-14367 Enable comments on azure based on settings | Jacek Poreda | 2025-01-09 | 1 | -0/+1 |
| | |||||
* | SONAR-14367 Add new field to ProjectAlmSettingDto and update queries | Jacek Poreda | 2025-01-09 | 1 | -1/+1 |
| | |||||
* | SONAR-23119 Implement database migration logging mechanism | Alain Kermis | 2025-01-03 | 2 | -0/+56 |
| | |||||
* | SONAR-24003 Delete unnecessary imports | Julien Camus | 2024-12-18 | 7 | -18/+11 |
| | |||||
* | SONAR-23619 Rename ai_code_assurance_column (#12320) | Anita Stanisz | 2024-11-29 | 1 | -1/+1 |
| | |||||
* | SONAR-23649 Conditions mismatch notification should be enabled by default ↵ | Léo Geoffroy | 2024-11-26 | 1 | -7/+6 |
| | | | | for Quality gate administrators | ||||
* | SONAR-23427 Stop relying on Qualifiers, Scopes and ResourceType from the ↵ | Julien HENRY | 2024-10-24 | 5 | -137/+26 |
| | | | | plugin API | ||||
* | SONAR-23098 Persist dependencies in the compute engine | Julien HENRY | 2024-10-21 | 1 | -0/+12 |
| | |||||
* | SONAR-23098 Create Project Dependencies DB model | antoine.vinot | 2024-10-21 | 3 | -1/+71 |
| | |||||
* | SONAR-23250 Support impacts in QP export-import | OrlovAlexander | 2024-10-16 | 1 | -1/+1 |
| | |||||
* | NO-JIRA Stop using deprecated methods from RandomStringUtils | Matteo Mara | 2024-10-14 | 23 | -159/+154 |
| | |||||
* | SONAR-22872 Correctly populate ncloc_language_distribution | Eric Giffon | 2024-10-09 | 1 | -0/+1 |
| | |||||
* | SONAR-22879 Remove code related to live_measures table | Eric Giffon | 2024-10-09 | 2 | -51/+0 |
| | |||||
* | SONAR-22872 Update DB populator to write JSON measures | Eric Giffon | 2024-10-09 | 2 | -22/+27 |
| | |||||
* | SONAR-22925 Import/export of JSON measures | Claire Villard | 2024-10-09 | 1 | -3/+1 |
| | |||||
* | SONAR-22873 Read JSON measures (#11683) | Eric Giffon | 2024-10-09 | 2 | -11/+29 |
| | | | | Co-authored-by: Claire Villard <claire.villard@sonarsource.com> | ||||
* | SONAR-22872 Live update of JSON measures | Eric Giffon | 2024-10-09 | 1 | -2/+1 |
| | |||||
* | SONAR-22872 Purge measures table | Eric Giffon | 2024-10-09 | 1 | -1/+11 |
| | |||||
* | SONAR-22872 CE step to persist measures in JSON format | Eric Giffon | 2024-10-09 | 1 | -0/+18 |
| | |||||
* | SONAR-23064 Return 403 when trying to select/deselect a Quality Gate for ↵ | Matteo Mara | 2024-09-25 | 1 | -0/+5 |
| | | | | AI-flagged project | ||||
* | SONAR-22649 Create DB populator for creating generated data | Alain Kermis | 2024-09-19 | 19 | -147/+325 |
| | |||||
* | SONAR-22914 Create and update APIs for CVEs | antoine.vinot | 2024-09-12 | 1 | -0/+6 |
| | |||||
* | SONAR-22874 Rename Measure classes to ProjectMeasure | Eric Giffon | 2024-08-28 | 2 | -17/+17 |
| |