Hi,

The analysis repo on SounarCloud has been created [1].

I read the guide [2] and the example of PLC4x [3]  and Sling projects.
I noticed that all of them mentioned "sonar_token", e.g., "
withCredentials([string(credentialsId: 'chris-sonarcloud-token', variable: '
SONAR_TOKEN')]".

I have created a token called xiangdong-iotdb-sonarcloud-token, but my
question is, don't I need to put the value of the token into the
configuration file? If I publish the token value, is that suitable?
(According to my understanding, the token should be protected as a privacy).

(I am trying how to config can work. But if someone can give a guide, it
will be very helpful :-D ).

[1] https://sonarcloud.io/dashboard?id=apache_incubator-iotdb
[2] https://cwiki.apache.org/confluence/display/INFRA/SonarQube+Analysis
[3] https://github.com/apache/plc4x/blob/develop/Jenkinsfile#L124

Best,
-----------------------------------
Xiangdong Huang
School of Software, Tsinghua University

 黄向东
清华大学 软件学院


Xiangdong Huang <[email protected]> 于2019年12月1日周日 下午1:57写道:

> Hi,
>
> thanks Chris and Willem.
> I have created a jira ticket for applying creating a project on
> sonarcloud.io [1].
> Before the application is complete, I disable the sonar analysis from
> jenkins temporary.
>
> [1] https://issues.apache.org/jira/browse/INFRA-19507
> -----------------------------------
> Xiangdong Huang
> School of Software, Tsinghua University
>
>  黄向东
> 清华大学 软件学院
>
>
> Willem Jiang <[email protected]> 于2019年12月1日周日 上午9:39写道:
>
>> You need to some setup[1] to enable the Sonar Cloud Service for Apache
>> project.
>>
>> [1]https://cwiki.apache.org/confluence/display/INFRA/SonarQube+Analysis
>>
>> Willem Jiang
>>
>> Twitter: willemjiang
>> Weibo: 姜宁willem
>>
>> Willem Jiang
>>
>> Twitter: willemjiang
>> Weibo: 姜宁willem
>>
>> On Sat, Nov 30, 2019 at 10:31 PM Christofer Dutz
>> <[email protected]> wrote:
>> >
>> > Hi Xiangdong,
>> >
>> > The ASF SonarCube instance is no longer being run.
>> > The build has to be changed to SounarCloud.
>> >
>> > Have a look at the PLC4X build (Jenkinsfile).
>> > We did the change there some time ago.
>> >
>> > Chris
>> >
>> > Am 29.11.19, 17:24 schrieb "Xiangdong Huang" <[email protected]>:
>> >
>> >     Hi,
>> >
>> >     I find Apache Jenkins build failed because "SonarQube installation
>> defined
>> >     in this job (ASF Sonar Analysis) does not match any configured
>> >     installation. Number of installations that can be configured: 0."
>> >
>> >     I checked recent commits, and find the most possible code
>> modification is
>> >     that  `vulnerability-checks` is moved to `apache-release` profile.
>> >
>> >     So, is this task who triggers Jenkins to submit a job to SonarQube?
>> >
>> >     If so, you'd better revoke your modification on the pom file,
>> @jialin Qiao.
>> >
>> >     Best,
>> >     ----------------------------------
>> >     Xiangdong Huang
>> >     School of Software, Tsinghua University
>> >
>> >      黄向东
>> >     清华大学 软件学院
>> >
>> >
>>
>

Reply via email to