Error importing dependency-check report about dependency-check-sonar-plugin HOT 4 CLOSED

The issue should be resolved now.

from dependency-check-sonar-plugin.

The SonarQube plugin does not scan. It requires the XML output from a Dependency-Check implementation (CLI, Maven, Jenkins, etc). In the SQ configuration, you specify the path to the XML file. Refer to the readme and examples.

from dependency-check-sonar-plugin.

HI steve,

Maybe I phrased the issue a bit unclear. I am aware of how the plugin works. the latest version of the owasp command line scanner on nodejs project returns an xml file which contains the following code:
"

moment:2.11.2
C:\agent_work\14\s\server\package.json?moment
"
The filepath part of the XML contains a '?' character, which causes the sonarqube import plugin to fail with the stacktrace as pointed above.

Btw i managed to workaround the issue by reverting to an older version of the OWASP dependency scanner command line tool.
Nonetheless, I think it should be relatively easy to fix.

Kind regards,

René

from dependency-check-sonar-plugin.

Ah, thanks for the clarification.

from dependency-check-sonar-plugin.