webssh2/sonar-project.properties at main · billchurch/webssh2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
# SonarQube Configuration for WebSSH2

# Project Information
sonar.projectKey=webssh2
sonar.projectName=WebSSH2
sonar.projectVersion=1.0

# Source and Test Configuration
sonar.sources=app,index.ts,scripts
sonar.tests=tests
sonar.test.inclusions=tests/**/*.test.ts,tests/**/*.test.js,tests/**/*.vitest.ts,tests/**/*.spec.ts,tests/**/*.spec.js

# TypeScript/JavaScript Configuration
sonar.typescript.file.suffixes=.ts,.tsx
sonar.javascript.file.suffixes=.js,.jsx,.mjs,.cjs

# Coverage and Analysis
sonar.javascript.lcov.reportPaths=coverage/lcov.info
sonar.testExecutionReportPaths=coverage/test-reporter.xml

# Exclusions
sonar.exclusions=node_modules/**,coverage/**,client/public/**,*.md,*.json,tests/servers/**,dist/**,**/*.d.ts,**/*.mjs,.tsbuildinfo,tests/test-constants.ts

# Test-specific rule exclusions
# S2068: Hard-coded credentials (acceptable in test files)
# S4036: Searching OS commands in PATH (needed for test infrastructure)
# S6290: Hardcoded secrets (TypeScript variant)
# S8431: Tag+digest in FROM is the Renovate-recommended pattern; the
#        tag is required by .github/renovate.json matchCurrentValue.
# S7631: Forked-repo checkout in rebuild-release-tags.yml. Not exploitable:
#        the triggering workflow (docker-publish) has no pull_request/
#        pull_request_target trigger, the unprivileged `guard` job validates
#        every event value and never executes the checked-out tree, and the
#        privileged `rebuild` job checks out only this repo's own release tag.
sonar.issue.ignore.multicriteria=e1,e2,e3,e4,e5,e6,e7,e8,e9,e10,e11,e12
sonar.issue.ignore.multicriteria.e1.ruleKey=typescript:S2068
sonar.issue.ignore.multicriteria.e1.resourceKey=tests/**/*
sonar.issue.ignore.multicriteria.e2.ruleKey=typescript:S4036
sonar.issue.ignore.multicriteria.e2.resourceKey=tests/**/*
sonar.issue.ignore.multicriteria.e3.ruleKey=typescript:S4036
sonar.issue.ignore.multicriteria.e3.resourceKey=scripts/**/*
sonar.issue.ignore.multicriteria.e4.ruleKey=javascript:S2068
sonar.issue.ignore.multicriteria.e4.resourceKey=tests/**/*
sonar.issue.ignore.multicriteria.e5.ruleKey=typescript:S6290
sonar.issue.ignore.multicriteria.e5.resourceKey=tests/**/*
sonar.issue.ignore.multicriteria.e6.ruleKey=javascript:S6290
sonar.issue.ignore.multicriteria.e6.resourceKey=tests/**/*
sonar.issue.ignore.multicriteria.e7.ruleKey=typescript:S2068
sonar.issue.ignore.multicriteria.e7.resourceKey=tests/unit/socket/**/*
sonar.issue.ignore.multicriteria.e8.ruleKey=typescript:S6290
sonar.issue.ignore.multicriteria.e8.resourceKey=tests/unit/socket/**/*
sonar.issue.ignore.multicriteria.e9.ruleKey=typescript:S2068
sonar.issue.ignore.multicriteria.e9.resourceKey=tests/test-constants.ts
sonar.issue.ignore.multicriteria.e10.ruleKey=typescript:S1313
sonar.issue.ignore.multicriteria.e10.resourceKey=tests/test-constants.ts
sonar.issue.ignore.multicriteria.e11.ruleKey=docker:S8431
sonar.issue.ignore.multicriteria.e11.resourceKey=**/Dockerfile
sonar.issue.ignore.multicriteria.e12.ruleKey=githubactions:S7631
sonar.issue.ignore.multicriteria.e12.resourceKey=.github/workflows/rebuild-release-tags.yml

# Language Configuration
sonar.sourceEncoding=UTF-8

# Optional: Specify Node.js executable if needed
# sonar.nodejs.executable=/usr/local/bin/node

# Optional: Increase max file size if needed (default 1000KB)
# sonar.javascript.maxFileSize=2000