Publish dependency-check-sonar-plugin on SonarQube Marketplace about dependency-check-sonar-plugin HOT 4 CLOSED

@jycr I have tried multiple times to get it listed, once when it was originally released when SQ was using the old Haus infrastructure, and again when using the new.

There is too much process and rules that govern the creation and publishing of plugins. I will certainly not be asking a committee to vote every time I want to release a plugin. The whole process is nonsense and I do not want any part of it. As you can see, I have met all/most of their requirements already.

I am happy to write plugins for community consumption, but I expect the corporate entity that backs it to make it easy for the community to thrive. SonarSource does not do this.

This combined with major API changes between LTS releases and they are lucky to have the little community they do. If 7.x also has major API changes that require plugins be refactored, there will not be any future Dependency-Check SonarQube plugins from me.

from dependency-check-sonar-plugin.

I understand.
If you agree, I can do the "administrative steps" for you, and try to adapt the code to meet all the requirements.
Indeed, in our compagny, all needed plugins must come from marketplace. We can't install manually plugins

from dependency-check-sonar-plugin.

From my count, there are 23 plugins in the marketplace that are not developed by SonarSource or with the help of SonarSource. By comparison, there are 44 plugins recognized by SonarSource that are not included in the marketplace, including Dependency-Check. https://docs.sonarqube.org/display/PLUG/Other+Plugins

The ecosystem for community plugins not in the marketplace is larger than what's available in the marketplace. All available security-specific plugins are not available in the martketplace. This includes Checkmarx, Dependency-Check, ThreadFix, and ZAP.

There is no benefit to this project to include it.

from dependency-check-sonar-plugin.

@stevespringett any news on this?

from dependency-check-sonar-plugin.