Menu
I'm using Sonarqube on Ubuntu 12.01 machine. I use Sonar Runner with Jenkins plugin to analyse my code.
The problem came when I execute an analysis for new projects. For example I have saved on Sonar A and B project, if I execute analysis for new C project for this project false positive option don't appear. This occurs since I update Sonar to the last version 4.1.2. With projects that have been created with the previous version all works fine. Anyone knows what is the problem? For my company the possibility of mark errors like false positive is really important.
704
False-Positive and Won't FixYou can mark individual issues False Positive or Won't Fix through the issues interface. If you're using PR analysis provided by the Developer Edition, issues marked False Positive or Won't Fix will retain that status after merge. This is the preferred approach.
Select a group in Target Group. In the Findings tab, select the finding to mark as false positive. Multiple findings can be selected by pressing the CTRL or the SHIFT key while clicking on the findings. Right click on finding or groups of findings and select Mark as False Positive.
Issues are automatically closed (status: Closed) when: an issue (of any status) has been properly fixed => Resolution: Fixed. an issue no longer exists because the related coding rule has been deactived or is no longer available (ie: plugin has been removed) => Resolution: Removed.
Resolved (Won't Fix) - set automatically by SonarQube when a Security Auditor Accepts the fix done by a developer on a Manual Vulnerability or when an Open Hotspot or Manual Vulnerability is Cleared by a Security Auditor.
The "False positive" action is only available with the "Administer Issues" permission, so you might want to check the permissions on the newly created project(s). If it is indeed an issue with permissions, then your next step will probably to modify the default permission template associated with projects, so that you get the right permissions upon creation.
196
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
