|
|
|
|
@ -6,41 +6,27 @@ |
|
|
|
|
|
|
|
|
|
<parent> |
|
|
|
|
<groupId>com.keyware.sonar</groupId> |
|
|
|
|
<artifactId>sonar-keyware-plugins</artifactId> |
|
|
|
|
<version>1.0-SNAPSHOT</version> |
|
|
|
|
<artifactId>sonar-keyware</artifactId> |
|
|
|
|
<version>1.0</version> |
|
|
|
|
</parent> |
|
|
|
|
|
|
|
|
|
<name>C++ 信息安全性设计准则</name> |
|
|
|
|
<artifactId>sonar-keyware-plugins-cxx</artifactId> |
|
|
|
|
<version>1.0</version> |
|
|
|
|
<packaging>sonar-plugin</packaging> |
|
|
|
|
<version>1.0-SNAPSHOT</version> |
|
|
|
|
<description>用于检查C++源代码的安全性设计准则的Sonarqube插件</description> |
|
|
|
|
|
|
|
|
|
<licenses> |
|
|
|
|
<license> |
|
|
|
|
<name>Keyware Private Terms</name> |
|
|
|
|
<distribution>user must manually download and install the dependency.</distribution> |
|
|
|
|
</license> |
|
|
|
|
</licenses> |
|
|
|
|
|
|
|
|
|
<organization> |
|
|
|
|
<name>北京关键科技股份有限公司</name> |
|
|
|
|
<url>http://www.keyware.cn</url> |
|
|
|
|
</organization> |
|
|
|
|
|
|
|
|
|
<url>http://www.keyware.cn</url> |
|
|
|
|
|
|
|
|
|
<scm> |
|
|
|
|
<connection>scm:git:http://www.keyware.cn</connection> |
|
|
|
|
<developerConnection>scm:git:http://www.keyware.cn</developerConnection> |
|
|
|
|
<url>http://www.keyware.cn</url> |
|
|
|
|
<tag>-</tag> |
|
|
|
|
</scm> |
|
|
|
|
|
|
|
|
|
<properties> |
|
|
|
|
<sonar.artifact.path>target/${project.artifactId}-${project.version}.jar</sonar.artifact.path> |
|
|
|
|
<sonar.pluginClass>com.keyware.sonar.cxx.CxxSecurityDesignPlugin</sonar.pluginClass> |
|
|
|
|
<sonar.pluginName>C++ 信息安全性设计准则</sonar.pluginName> |
|
|
|
|
<!-- in addition, a dependency must be set in 'integration-tests/pom.xml' to aggregate the results --> |
|
|
|
|
<sonar.coverage.jacoco.xmlReportPaths>${basedir}/../${aggregate.report.dir}</sonar.coverage.jacoco.xmlReportPaths> |
|
|
|
|
|
|
|
|
|
<java.version>11</java.version> |
|
|
|
|
<commons-io.version>2.15.1</commons-io.version> |
|
|
|
|
<commons-lang.version>2.6</commons-lang.version> |
|
|
|
|
<sonar-cxx.versin>2.1.2-SNAPSHOT</sonar-cxx.versin> |
|
|
|
|
<!-- we depend on API ${sonar.version} but we keep backward compatibility with LTS --> |
|
|
|
|
<sonar.version>9.9.0.65466</sonar.version> |
|
|
|
|
<sonar.plugin.api.version>9.14.0.375</sonar.plugin.api.version> |
|
|
|
|
@ -56,82 +42,77 @@ |
|
|
|
|
|
|
|
|
|
<dependencies> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.sonarsource.sonarqube-plugins.cxx</groupId> |
|
|
|
|
<artifactId>cxx-sslr-toolkit</artifactId> |
|
|
|
|
<systemPath>${project.basedir}/libs/cxx-sslr-toolkit-2.1.1.488.jar</systemPath> |
|
|
|
|
<version>2.1.1.488</version> |
|
|
|
|
<scope>system</scope> |
|
|
|
|
<groupId>org.sonarsource.api.plugin</groupId> |
|
|
|
|
<artifactId>sonar-plugin-api</artifactId> |
|
|
|
|
<scope>provided</scope> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.sonarsource.sonarqube</groupId> |
|
|
|
|
<artifactId>sonar-plugin-api-impl</artifactId> |
|
|
|
|
<scope>test</scope> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.sonarsource.sonarqube-plugins.cxx</groupId> |
|
|
|
|
<artifactId>sonar-cxx-plugin</artifactId> |
|
|
|
|
<systemPath>${project.basedir}/libs/sonar-cxx-plugin-2.1.1.488.jar</systemPath> |
|
|
|
|
<version>2.1.1.488</version> |
|
|
|
|
<!--<type>sonar-plugin</type>--> |
|
|
|
|
<scope>system</scope> |
|
|
|
|
<version>${sonar-cxx.versin}</version> |
|
|
|
|
<scope>provided</scope> |
|
|
|
|
</dependency> |
|
|
|
|
|
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.sonarsource.api.plugin</groupId> |
|
|
|
|
<artifactId>sonar-plugin-api</artifactId> |
|
|
|
|
<version>${sonar.plugin.api.version}</version> |
|
|
|
|
<groupId>org.sonarsource.sonarqube-plugins.cxx</groupId> |
|
|
|
|
<artifactId>cxx-squid</artifactId> |
|
|
|
|
<version>${sonar-cxx.versin}</version> |
|
|
|
|
</dependency> |
|
|
|
|
|
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.sonarsource.sonarqube</groupId> |
|
|
|
|
<artifactId>sonar-plugin-api-impl</artifactId> |
|
|
|
|
<version>${sonar.version}</version> |
|
|
|
|
<scope>compile</scope> |
|
|
|
|
<groupId>org.sonarsource.sonarqube-plugins.cxx</groupId> |
|
|
|
|
<artifactId>cxx-checks</artifactId> |
|
|
|
|
<version>${sonar-cxx.versin}</version> |
|
|
|
|
</dependency> |
|
|
|
|
|
|
|
|
|
<dependency> |
|
|
|
|
<groupId>commons-io</groupId> |
|
|
|
|
<artifactId>commons-io</artifactId> |
|
|
|
|
<version>${commons-io.version}</version> |
|
|
|
|
<scope>test</scope> |
|
|
|
|
<groupId>org.sonarsource.sonarqube-plugins.cxx</groupId> |
|
|
|
|
<artifactId>cxx-sensors</artifactId> |
|
|
|
|
<version>${sonar-cxx.versin}</version> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>commons-lang</groupId> |
|
|
|
|
<artifactId>commons-lang</artifactId> |
|
|
|
|
<version>${commons-lang.version}</version> |
|
|
|
|
<groupId>org.sonarsource.sonarqube-plugins.cxx</groupId> |
|
|
|
|
<artifactId>cxx-squid-bridge</artifactId> |
|
|
|
|
<version>${sonar-cxx.versin}</version> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.sonarsource.sonarqube-plugins.cxx</groupId> |
|
|
|
|
<artifactId>sslr-core</artifactId> |
|
|
|
|
<version>${sonar-cxx.versin}</version> |
|
|
|
|
</dependency> |
|
|
|
|
|
|
|
|
|
<dependency> |
|
|
|
|
<groupId>com.google.code.findbugs</groupId> |
|
|
|
|
<artifactId>jsr305</artifactId> |
|
|
|
|
<version>${jsr305.version}</version> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>com.google.guava</groupId> |
|
|
|
|
<artifactId>guava</artifactId> |
|
|
|
|
<version>${guava.version}</version> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>com.google.code.gson</groupId> |
|
|
|
|
<artifactId>gson</artifactId> |
|
|
|
|
<version>${gson.version}</version> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.mockito</groupId> |
|
|
|
|
<artifactId>mockito-core</artifactId> |
|
|
|
|
<version>${mockito-core.version}</version> |
|
|
|
|
<scope>test</scope> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.assertj</groupId> |
|
|
|
|
<artifactId>assertj-core</artifactId> |
|
|
|
|
<version>${assertj-core.version}</version> |
|
|
|
|
<scope>test</scope> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.junit.jupiter</groupId> |
|
|
|
|
<artifactId>junit-jupiter-api</artifactId> |
|
|
|
|
<version>${junit-jupiter.version}</version> |
|
|
|
|
<artifactId>junit-jupiter-engine</artifactId> |
|
|
|
|
<scope>test</scope> |
|
|
|
|
</dependency> |
|
|
|
|
<dependency> |
|
|
|
|
<groupId>org.junit.jupiter</groupId> |
|
|
|
|
<artifactId>junit-jupiter-engine</artifactId> |
|
|
|
|
<version>${junit-jupiter.version}</version> |
|
|
|
|
<artifactId>junit-jupiter-api</artifactId> |
|
|
|
|
<scope>test</scope> |
|
|
|
|
</dependency> |
|
|
|
|
</dependencies> |
|
|
|
|
@ -142,8 +123,15 @@ |
|
|
|
|
<plugin> |
|
|
|
|
<groupId>org.sonarsource.sonar-packaging-maven-plugin</groupId> |
|
|
|
|
<artifactId>sonar-packaging-maven-plugin</artifactId> |
|
|
|
|
<extensions>true</extensions> |
|
|
|
|
<configuration> |
|
|
|
|
<sonarQubeMinVersion>${sonarQubeMinVersion}</sonarQubeMinVersion> |
|
|
|
|
<pluginKey>keywareCxxPlugin</pluginKey> |
|
|
|
|
<pluginName>C++ 安全性设计准则</pluginName> |
|
|
|
|
<pluginClass>com.keyware.sonar.cxx.CxxSecurityDesignRulesPlugin</pluginClass> |
|
|
|
|
<sonarLintSupported>true</sonarLintSupported> |
|
|
|
|
<skipDependenciesPackaging>true</skipDependenciesPackaging> |
|
|
|
|
<pluginApiMinVersion>9.14.0.375</pluginApiMinVersion> |
|
|
|
|
<requirePlugins>java:${project.version}</requirePlugins> |
|
|
|
|
</configuration> |
|
|
|
|
</plugin> |
|
|
|
|
|
|
|
|
|
@ -165,6 +153,8 @@ |
|
|
|
|
</configuration> |
|
|
|
|
</plugin> |
|
|
|
|
</plugins> |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<resources> |
|
|
|
|
<resource> |
|
|
|
|
<directory>src/main/resources</directory> |
Guo XIn
11 months ago