
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
karma-sonarqube-reporter
Advanced tools
A karma reporter plugin for generating Sonarqube generic test reports
A Karma reporter plugin for generating SonarQube generic test reports.
npm install karma-sonarqube-reporter --save-dev
Adjust your karma.conf.js
file:
Create a new plugin entry
plugins: [
require('karma-sonarqube-reporter')
]
Add configuration parameters
// Configuration example
sonarqubeReporter: {
basePath: 'src/app', // test files folder
filePattern: '**/*spec.ts', // test files glob pattern
outputFolder: 'reports', // report destination
encoding: 'utf-8', // report encoding
reportName: (metadata) => { // report name callback
/**
* Report metadata content:
* - metadata[0] = browser name
* - metadata[1] = browser version
* - metadata[2] = plataform name
* - metadata[3] = plataform version
* e.g. firefox.54.0.0.linux.0.0.0.xml
* e.g. chrome.65.0.3325.linux.0.0.0.xml
*/
return metadata.concat('xml').join('.');
}
}
Activate sonarqube
reporter
reporters: ['sonarqube']
Click here to see a full example.
If your project uses Angular CLI run ng test
and check the output folder.
$ ls reports
firefox.54.0.0.linux.0.0.0.xml
chrome.65.0.3325.linux.0.0.0.xml
The report files' schema is defined on the SonarQube Generic Test Data page.
Add the following property to your sonar-project.properties
:
sonar.testExecutionReportPaths= \
reports/firefox.54.0.0.linux.0.0.0.xml, \
reports/chrome.65.0.3325.linux.0.0.0.xml
Finally, start SonarQube Scanner on your project folder.
That's all!
FAQs
A karma reporter plugin for generating Sonarqube generic test reports
The npm package karma-sonarqube-reporter receives a total of 21,766 weekly downloads. As such, karma-sonarqube-reporter popularity was classified as popular.
We found that karma-sonarqube-reporter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.