Cannot collspae Published Vulnerabilities in SonarQube about dependency-check-sonar-plugin HOT 6 CLOSED

Maybe the following change will help you. Unfortunately the pull request was not followed up by the author, if it helps you I would be glad about a new pull request.
#765

from dependency-check-sonar-plugin.

Do I need to build it to test? I try to check /extensions/plugins/sonar-dependency-check-plugin-4.0.0.jar, but I don't find DependencyCheckReportApp.js
Is it possible to just replace the js to test? Because it seems need to prepare a Java venrionment to build this plugin.

from dependency-check-sonar-plugin.

Yes you need to manually add these changes to the code, then build the plugin and deposit it in SonarQube extension folder.

from dependency-check-sonar-plugin.

Yes you need to manually add these changes to the code, then build the plugin and deposit it in SonarQube extension folder.

Hi, I try to build this plugin, I can build 4.0 now. But I'm not sure how to apply the PR to my code,
so, I try to download it from https://github.com/brileyd/dependency-check-sonar-plugin/tree/brileyd-patch-1
But it generates sonar-dependency-check-plugin-3.1.1-SNAPSHOT.jar, is it correct?
This PR is created before 4.0, it seems correct... what should I do? Test 3.1.1?

from dependency-check-sonar-plugin.

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 14 days.

from dependency-check-sonar-plugin.

This issue was closed because it has been stalled for 14 days with no activity.

from dependency-check-sonar-plugin.