Page Operations
Browse Space| Name |
Security Rules |
| Authors |
SonarSource |
| Jira |
http://jira.codehaus.org/browse/SONARPLUGINS/component/14110 |
| Most Recent Version |
0.1 |
| License |
LGPL v3 |
| Sources |
http://svn.codehaus.org/sonar-plugins/trunk/security-rules/ |
| Download |
sonar-security-rules-plugin-0.1.jar |
Compatibility with Sonar
| Plugin versions |
1.10+ |
|---|---|
| 0.1 |  |
Description / Features
This plugin enables to define and monitor a group of rules. The violations on those rules get reported in the new widget. The plugin is called Security Rules Plugin as it embedds the list of security rules as the default set of rules.
The set of rules can be redefined by going to configuration -> settings -> Security rules. The format is pluginName:ruleKey, pluginName2:ruleKey2...
Usage & Installation
1. Copy the jar into /extensions/plugins/ directory
2. Restart Sonar Web server
3. Launch a new quality analysis and the metrics will be fed
Known limitations
The plugin enables to quickly identify files that are impacted by a security break, but when in the file there is no mechanism to highlight the security violations.
Posted by
I added the sonar-security-rules-plugin-0.1.jar to my extensions/plugins directory. When I restarted my webserver, I did not see the Security Rules Plugin under Configuration -> Settings. I am using Sonar 1.9.2 on Apache Tomcat 6.0.14.