Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | ScaDependencyDto: fix some Nullable annotations | Havoc Pennington | 2025-03-08 | 1 | -11/+9 | |
| | ||||||
* | SONAR-24588 Search for releases with before and after instead of just the ↵ | Jeremy Katz | 2025-03-08 | 2 | -6/+6 | |
| | | | | beginning of the string | |||||
* | SQRP-308 add the newInPullRequest filter to releases and risks endpoints | Havoc Pennington | 2025-03-08 | 12 | -43/+94 | |
| | | | | Also, default it to true on pull requests. | |||||
* | SQRP-308 add a new_in_pull_request column to sca_releases and sca_dependencies | Havoc Pennington | 2025-03-08 | 11 | -14/+58 | |
| | ||||||
* | SCA-97 make ScaDependenciesDbTester.newScaDependencyDto static | Havoc Pennington | 2025-03-07 | 1 | -13/+13 | |
| | ||||||
* | SCA-97 pull the identity concept out of PersistScalStepImpl and into DTOs ↵ | Havoc Pennington | 2025-03-07 | 6 | -1/+187 | |
| | | | | | | | themselves This allows it to be more consistent/documented and reusable (and helps us remember to update it when needed). | |||||
* | SQRP-275 Add counts of releases by package manager in releases endpoint | Jeremy Katz | 2025-03-06 | 5 | -0/+56 | |
| | | | This will enable the frontend to know what package managers are in use by a project to show the correct things in the left filter bar | |||||
* | SQRP-299 Add query with filter/sort to ScaIssuesReleasesDetailsDao | Havoc Pennington | 2025-03-04 | 9 | -16/+957 | |
| | ||||||
* | SQRP-249 add ScaIssueReleaseDetailsDto and mapper | Havoc Pennington | 2025-03-04 | 10 | -0/+367 | |
| | | | | | | | | | | | | | | | | This is used to query SCA issues for a single analysis with all the necessary tables joined to it to get the full issue context. SQRP-301 rename DbTester.getIssuesWithScaDbTester to getScaIssuesReleasesDetailsDbTester SQRP-301 rename DbClient.issuesWithScaDao to scaIssuesReleasesDao SQRP-301 add better doc comment to ScaIssueReleaseDetailsDto on meaning of identity fields in sca_issues_releases dbtester, fix to work after separating new/insert SQRP-296 port ScaIssueReleaseDetails to query cve_ids not title | |||||
* | SQRP-292 Add sca_issues_releases | Travis Collins | 2025-03-04 | 12 | -2/+417 | |
| | | | | | | | | SQRP-293 add sca_issues_releases.severity column SQRP-292 Update sca_issues_releases Dao to support persisting SQRP-300 Add sca_issues_releases.severity_sort_key | |||||
* | SQRP-246 Register a UUID for SCA issues in sca_issues table | Havoc Pennington | 2025-03-04 | 27 | -10/+1480 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This gives each issue a UUID that spans projects & analyses. SQRP-246 remove "get" from DbClient getter for sca issues DAO This wasn't following the naming convention. SQRP-287 add "IfApplicable" methods to ScaIssue These handle two things: * blank values become Optional.empty instead of junk * allows us to get all applicable values from a ScaIssue reference without type-casting. SQRP-287 add ScaIssuesDbTester Utility methods for ScaIssues testing SQRP-287 use a magic string value instead of empty string in ScaIssueDto Because Oracle considers empty string to be a synonym for null. SQRP-287 ScaIssuesDbTester vary the license saved in test issues SQRP-247 add more unit tests for ScaIssueDto SQRP-287 rename ScaIssue.titleIfApplicable => vulnerabilityTitleIfApplicable SQRP-246 make assertColumnDefinition work with DECIMAL on H2 SQRP-293 add base_severity to sca_vulnerability_issues This is the severity prior to any project-specific factors such as reachability. SQRP-293 increase ScaIssue test coverage SQRP-246 Add ScaIssueDto.Builder SQRP-246 Use a short placeholder CVE title, not giant description SQRP-246 Add toString to ScaIssue subtypes in sca_issues dbtester, separate new from insert SQRP-296 replace sca_vulnerability_issues.title with cwe_ids Replace title with cweIds in ScaIssue Remove ScaIssueFactory to be put back with IssuesReleases Replace title with cweids in the steps Change severity to INFO, LOW, MEDIUM, HIGH | |||||
* | SONAR-24436 Only pass 2 params to CONCAT() | Duarte Meneses | 2025-03-04 | 1 | -1/+1 | |
| | | | Co-authored-by: Cody Simms <cody.simms@sonarsource.com> | |||||
* | SQRP-294 use ListOfListOfStringsTypeHandler only for a single mapper, not ↵ | Havoc Pennington | 2025-03-01 | 3 | -24/+33 | |
| | | | | globally | |||||
* | SQRP-279 Don't say SCA analysis | Bill Nottingham | 2025-02-28 | 1 | -1/+1 | |
| | ||||||
* | SCA-56 Run "reformat code" on SCA files | Havoc Pennington | 2025-02-28 | 10 | -69/+66 | |
| | ||||||
* | SQRP-191 Ingest and persist the new "chains" field on each dependency | Tieg Zaharia | 2025-02-28 | 10 | -21/+122 | |
| | | | Co-authored-by: Travis Collins <travistx@gmail.com> | |||||
* | SQRP-156 A frontend-used API is created that returns a CycloneDX SBOM for a ↵ | John Bintz | 2025-02-28 | 2 | -9/+10 | |
| | | | | | project Co-authored-by: Antoine Vinot <antoine.vinot@sonarsource.com> | |||||
* | SQRP-242 Add releases endpoints | Travis Collins | 2025-02-28 | 6 | -2/+123 | |
| | ||||||
* | SQRP-191 add new "sca_dependencies.chains" column | Tieg Zaharia | 2025-02-19 | 2 | -0/+3 | |
| | ||||||
* | SQRP-221 Add sca_releases table splitting out part of sca_dependencies | Havoc Pennington | 2025-02-19 | 21 | -201/+1115 | |
| | | | | | | | | This will allow us to do paginated queries of releases instead of dependencies. In this commit, the behavior of the dependencies endpoint is not changed; this commit sets it up to be change-able, but just keeps it the same for the time being. | |||||
* | SQRP-188 Add filtering to "search" dependencies REST API | Javier García Orduña | 2025-02-19 | 5 | -97/+174 | |
| | ||||||
* | SQRP-140 Expose dependency details with new REST APIs | Javier García Orduña | 2025-02-19 | 11 | -483/+4 | |
| | ||||||
* | SQRP-172 fix typo in selectByUuid in ScaDependenciesMapper | Havoc Pennington | 2025-02-19 | 2 | -1/+10 | |
| | ||||||
* | SQRP-138 Create the sca_dependencies database table | Havoc Pennington | 2025-02-19 | 16 | -0/+888 | |
| | ||||||
* | SQRP-154 Cleanup leftovers from FOSSA | Javier García Orduña | 2025-02-04 | 23 | -773/+1 | |
| | ||||||
* | SONAR-24216 Optimize querying of measures on startup indexing | Eric Giffon | 2025-01-28 | 2 | -81/+23 | |
| | ||||||
* | SONAR-23122 Add telemetry to async issue index creation at startup. | Steve Marion | 2025-01-10 | 4 | -0/+75 | |
| | ||||||
* | SONAR-19225 Drop BCRYPT hash method for user passwords | Matteo Mara | 2025-01-09 | 3 | -4/+4 | |
| | ||||||
* | SONAR-23711 Retrieve rules based on mode | OrlovAlexander | 2025-01-09 | 8 | -0/+101 | |
| | ||||||
* | SONAR-24146 Update license headers for 2025 | Matteo Mara | 2025-01-09 | 759 | -759/+759 | |
| | ||||||
* | SONAR-14367 Enable comments on azure based on settings | Jacek Poreda | 2025-01-09 | 1 | -0/+1 | |
| | ||||||
* | SONAR-14367 Add new field to ProjectAlmSettingDto and update queries | Jacek Poreda | 2025-01-09 | 4 | -6/+56 | |
| | ||||||
* | SONAR-14367 Add inline_annotations_enabled column to project_alm_settings table | Jacek Poreda | 2025-01-09 | 1 | -1/+2 | |
| | ||||||
* | SONAR-22345 Reflect changes to prioritized rule in the changelog | OrlovAlexander | 2025-01-07 | 1 | -1/+2 | |
| | ||||||
* | SONAR-24086 allow to remove browse permission from groups/users if access ↵ | Aurelien Poscia | 2025-01-07 | 1 | -0/+13 | |
| | | | | via another mean | |||||
* | SONAR-24122 Fix application refresh not refreshing referencers | Duarte Meneses | 2025-01-06 | 4 | -42/+5 | |
| | | | Co-authored-by: Cody Simms <cody.simms@sonarsource.com> | |||||
* | SONAR-23119 Implement database migration logging mechanism | Alain Kermis | 2025-01-03 | 2 | -0/+56 | |
| | ||||||
* | SONAR-23119 Create 'migration_logs' table | Alain Kermis | 2025-01-03 | 10 | -0/+333 | |
| | ||||||
* | SONAR-24083 Add telemetries 'project_ai_detection_enabled' and ↵ | Dejan Milisavljevic | 2024-12-27 | 3 | -0/+16 | |
| | | | | 'instance_ai_detection_enabled' | |||||
* | SONAR-24021 Invoke method(s) only conditionally | Julien Camus | 2024-12-27 | 8 | -23/+100 | |
| | ||||||
* | SONAR-23402 Back up/restore clean code attributes for custom rules | Viktor Vorona | 2024-12-24 | 2 | -0/+7 | |
| | ||||||
* | SONAR-23978 Detect AI Code | Dejan Milisavljevic | 2024-12-20 | 5 | -0/+47 | |
| | ||||||
* | SONAR-23984 Add Scheduler to fetch information about Copilot usage | Léo Geoffroy | 2024-12-20 | 4 | -0/+91 | |
| | ||||||
* | SONAR-23978 Add DAO for user_ai_tool_usages table | Léo Geoffroy | 2024-12-20 | 9 | -0/+287 | |
| | ||||||
* | SONAR-23978 Create table 'user_ai_tool_usages' and add column ↵ | Dejan Milisavljevic | 2024-12-20 | 1 | -1/+10 | |
| | | | | 'detected_ai_code' to table 'projects' | |||||
* | SONAR-24057 Optimize querying of branch measures to only load required ↵ | Eric Giffon | 2024-12-20 | 11 | -329/+93 | |
| | | | | measures in memory | |||||
* | SONAR-23990 Replace with text block | Julien Camus | 2024-12-19 | 1 | -2/+14 | |
| | ||||||
* | SONAR-23936 Query all portfolio projects at once rather than recursively | Cody Simms | 2024-12-18 | 3 | -26/+43 | |
| | | | Co-authored-by: Duarte Meneses <duarte.meneses@sonarsource.com> | |||||
* | SONAR-19122 Update annotations from javax to jakarta | Jacek Poreda | 2024-12-18 | 1 | -1/+1 | |
| | ||||||
* | SONAR-24003 Delete unnecessary imports | Julien Camus | 2024-12-18 | 8 | -20/+13 | |
| |