
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
karma-sonarqube-reporter
Advanced tools
A karma reporter plugin for generating Sonarqube generic test reports
Karma reporter plugin for generating SonarQube generic test reports.
npm install karma-sonarqube-reporter --save-dev
Adjust your karma.conf.js
file:
Create a new plugin entry
plugins: [
require('karma-sonarqube-reporter')
]
Add configuration parameters
// Default configuration
sonarqubeReporter: {
basePath: 'src/app', // test files folder
filePattern: '**/*spec.ts', // test files glob pattern
encoding: 'utf-8', // test files encoding
outputFolder: 'reports', // report destination
legacyMode: false, // report for Sonarqube < 6.2 (disabled)
reportName: (metadata) => { // report name callback
/**
* Report metadata array:
* - metadata[0] = browser name
* - metadata[1] = browser version
* - metadata[2] = plataform name
* - metadata[3] = plataform version
*/
return metadata.concat('xml').join('.');
}
}
Activate sonarqube
reporter
reporters: ['sonarqube']
Click here to see a full example.
If your project uses Angular CLI run ng test
and check the output folder.
$ ls reports
chrome.65.0.3325.linux.0.0.0.xml
firefox.54.0.0.linux.0.0.0.xml
The current report files' schema is defined on the SonarQube Generic Test Data page.
Add to your sonar-project.properties
one of the following properties:
Legacy Mode | Property |
---|---|
false | sonar.testExecutionReportPaths |
true | sonar.genericcoverage.unitTestReportPaths |
Note report paths should be passed in a comma-delimited.
Finally, start SonarQube Scanner on your project folder.
That's all!
FAQs
A karma reporter plugin for generating Sonarqube generic test reports
The npm package karma-sonarqube-reporter receives a total of 21,766 weekly downloads. As such, karma-sonarqube-reporter popularity was classified as popular.
We found that karma-sonarqube-reporter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.