Comments (3)
Hi @javabeanz
Thank you very much for your comments.
Yes, documentation is already in my plan. I will create a detailed document soon.
The current OWASP/SonarQube docker image ( https://hub.docker.com/r/owasp/sonarqube/ ) has SonarQube 7.2.1 + several community plugins to enable SAST + Security enhancement to work on OpenShift.
Detailed list of community plugins can be found in the following Dockerfile
https://github.com/OWASP/sonarqube/blob/master/docker/Dockerfile
I will soon update SonarQube and the plugins to the latest version (SonarQube 7.3). There are so many things to do (proper versioning, auto-generated Quality Profiles for SAST, Production deployment manuals, Kubernetes/OpenShift support, etc.)
If you need more information, please let me know.
Thanks,
Vinod
from sonarqube.
Any updates?
Is v7.2.1 in the latest image? Readme,md info would already be much better until detailed documentation is added.
In addition, docker run
is missing volume configuration which implies that no data will be persisted. No word of MySql or PostgreSQL worries me a little bit too..
Was that intentional or this part got forgotten too?
10q
from sonarqube.
@ewoks PostgreSQL is the recommended DB. The SonarSource has discounted the support for MySql.
https://community.sonarsource.com/t/end-of-life-of-mysql-support/8667
If you want to run the project in production, you may run the docker image or create a similar docker image but you should use external DB services like PostgreSQL. If you are interested in contributing to the documentation, I am happy to review it. Alternatively, you can also use the official sonarqube documentation ( https://docs.sonarqube.org/ )
from sonarqube.
Related Issues (9)
- Task List
- License HOT 1
- Package references missing or not available
- setting env SQ_GITLAB_VERSION='4.0.0' doesn't install plugin
- Build failure - Unable to load component ProjectLock
- Crash if running from docker-compose
- Feature Request: Easy scan of OWASP Benchmark w/SonarQube
- Interesting suite of plugins for componet analysis java
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sonarqube.