forked from aws-solutions/serverless-image-handler
-
Notifications
You must be signed in to change notification settings - Fork 0
/
sonar-project.properties
70 lines (55 loc) · 2.98 KB
/
sonar-project.properties
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# Customize sonar.sources, sonar.exclusions, sonar.coverage.exclusions, sonar.tests and sonar
# unit test coverage reports based on your solutions
# Refer to https://docs.sonarqube.org/latest/project-administration/narrowing-the-focus/
# for details on sources and exclusions. Note also .gitignore
#
sonar.sources=source, deployment
# Focusing sonarqube analysis on non test code first and reducing noise from analysis of test code. Projects
# can customize the exclusions to include analyzing of test code if desired
sonar.exclusions= **/dist/**, \
deployment/**
# Code coverage Specific Properties
sonar.coverage.exclusions= **/jest.config.js, \
**/test/**, \
**/test*, \
source/demo-ui/**, \
source/constructs/bin/constructs.ts
# Ignoring duplications
sonar.cpd.exclusions=source/image-handler/test/**/*.ts, \
source/custom-resource/test/*.ts
# Ignoring following issues, false warnings
sonar.issue.ignore.multicriteria=e1, e2, e3, e4, e5, e6, e7, e8
# Enabling Cross-Origin Resource Sharing is security-sensitive.
sonar.issue.ignore.multicriteria.e1.ruleKey=typescript:S5122
sonar.issue.ignore.multicriteria.e1.resourceKey=source/image-handler/test/index.spec.ts
# Enabling Cross-Origin Resource Sharing is security-sensitive.
sonar.issue.ignore.multicriteria.e2.ruleKey=typescript:S5122
sonar.issue.ignore.multicriteria.e2.resourceKey=source/constructs/lib/serverless-image-stack.ts
# Enabling Cross-Origin Resource Sharing is security-sensitive.
sonar.issue.ignore.multicriteria.e3.ruleKey=typescript:S5122
sonar.issue.ignore.multicriteria.e3.resourceKey=source/image-handler/index.ts
# Using regular expressions is security-sensitive.
sonar.issue.ignore.multicriteria.e4.ruleKey=typescript:S4784
sonar.issue.ignore.multicriteria.e4.resourceKey=source/image-handler/thumbor-mapper.ts
# Hashing data is security-sensitive
sonar.issue.ignore.multicriteria.e5.ruleKey=typescript:S4790
sonar.issue.ignore.multicriteria.e5.resourceKey=source/custom-resource/index.ts
# Hashing data is security-sensitive
sonar.issue.ignore.multicriteria.e6.ruleKey=typescript:S4790
sonar.issue.ignore.multicriteria.e6.resourceKey=source/demo-ui/scripts.js
# Using regular expressions is security-sensitive.
sonar.issue.ignore.multicriteria.e7.ruleKey=typescript:S4784
sonar.issue.ignore.multicriteria.e7.resourceKey=source/image-handler/image-request.ts
# Using regular expressions is security-sensitive.
sonar.issue.ignore.multicriteria.e8.ruleKey=javascript:S4784
sonar.issue.ignore.multicriteria.e8.resourceKey=source/demo-ui/scripts.js
# Sensor SonarJS Coverage [javascript] was not allowing globbing
# for sonar.javascript.lcov.reportPaths such as this
# source/test/coverage-reports/jest/*/lcov.info
# so we have to provide an explicit list of reportPaths
sonar.javascript.lcov.reportPaths= \
source/test/coverage-reports/jest/constructs/lcov.info, \
source/test/coverage-reports/jest/custom-resource/lcov.info, \
source/test/coverage-reports/jest/image-handler/lcov.info
# Encoding of the source files
sonar.sourceEncoding=UTF-8