@mguillaumef/audiso v0.0.4

audiso

description

This module module convert npm-audit json report to sonarqube generic data issue report

how to use

help message

*** NOTICE : @mguillaumef/audiso v0.0.3
This module module convert npm-audit json report to sonarqube generic data issue report.
[-p], [--package-file]         1   string   The path of package.json (default: ./package.json)
[-o], [--output-file]          1   string   The output path of sonarqube issue report (default: ./audit-dependency-report-sonarqube.json)
[-i], [--input-file]           1   string   The input path of npm-audit report (default: ./audit-dependency-report.json)

generate npm-audit report (npm>=8)

cd project
npm audit --json > audit-dependency-report.json

audiso --package-file=./package.json --input-file=./audit-dependency-report.json --output-file=audit-dependency-report-sonarqube.json

update sonar-project.properties

# add package.json in sources index
sonar.sources=src,public,package.json

# add sonarqube report
sonar.externalIssuesReportPaths=audit-dependency-report-sonarqube.json