Aggregate sonar coverage

[derTobsch]

refs #419

atm we do not track jackson, so we will provide a report aggregate module that will cover all modules for us.

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

[XSpielinbox]

Will this also fix the never ending failing actions in forks, e.g. https://github.com/XSpielinbox/jollyday/actions or what does one have to do there to fix this?

[derTobsch]

Will this also fix the never ending failing actions in forks, e.g. https://github.com/XSpielinbox/jollyday/actions or what does one have to do there to fix this?

No this does not fix your problem. Your problem is that no sonar token is provided and therefore it cannot run sonar.

This will fix that all module reports will be aggregated. But I need to think about a good testing modularity, so that I do not need to write duplicated tests.

[XSpielinbox]

No this does not fix your problem. Your problem is that no sonar token is provided and therefore it cannot run sonar.

Ah, ok. Is there a possibility to disable these sonar test in forks as I don't see an option to provide a sonar without having an account there?

[derTobsch]

No this does not fix your problem. Your problem is that no sonar token is provided and therefore it cannot run sonar.

Ah, ok. Is there a possibility to disable these sonar test as I don't see an option to provide a sonar without having an account there?

yes of course. I will look into it.

[derTobsch]

@XSpielinbox see #448 please test it :)

[XSpielinbox]

@XSpielinbox see #448 please test it :)

Yes, it works now! Thank you!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA b8e43c7.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

report-aggregate/pom.xml

Package	Version	License	Issue Type
org.jacoco:jacoco-maven-plugin		Null	Unknown License

Allowed Licenses: Apache-2.0, MIT, BSD-3-Clause

OpenSSF Scorecard

Package	Version	Score	Details
maven/de.focus-shift:jollyday-core	1.1.0-SNAPSHOT	Unknown	Unknown
maven/de.focus-shift:jollyday-jackson	1.1.0-SNAPSHOT	Unknown	Unknown
maven/de.focus-shift:jollyday-jaxb	1.1.0-SNAPSHOT	Unknown	Unknown
maven/de.focus-shift:jollyday-tests	1.1.0-SNAPSHOT	Unknown	Unknown
maven/org.jacoco:jacoco-maven-plugin		🟢 6	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 10 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 9 license file detected Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected

Scanned Files

• jollyday-tests/pom.xml
• report-aggregate/pom.xml

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud