We have recently migrated to jira agile and the issues have changed from tasks bugs to stories. We have been using maven changes plugin to automatically send notification for new releases and it successfully includes issues resolved and so on. Now that we have stories, it does not include them to the message body. I have updated the configuration properties to include stories also and all possible issue types (Bug, New Feature, Task, Improvement, Sub-task,Story) but still no success. The jira report that is generated by the same plugin is correct but the mail still does not include them.
I also tried to attach the jira report (${basedir}/target/site/jira-report.html) but with no success.
Can anyone propose a solution or a work around too this issue?
After some further research and a lot of code checking in the source code of maven changes plug-in I found out that you have to include the following mapping in your configuration
<issueTypes>
<add>Story</add>
<fix>Bug</fix>
<update>Task</update>
</issueTypes>
This will inform the maven changes plug-in to map the build in xsd add,fix,update to Story, Bug, Task issues that are created with agile jira
Related
I'm new to fbinfer. I need to integrate my maven project with fbinfer for static code analysis.
Answering this a little late but Sonatype just launched a free Code quality and Software Composition Analysis (SCA) solution called Lift for devs using GitHub: http://lift.dev/
The list of included analyzers includes FBInfer and it takes two clicks (authorize GitHub app) to integrate your Maven application with Lift/FBInfer, thereby eliminating the pain of manually setting up an analyzer.
https://help.sonatype.com/lift/included-analyzers
I want to check if my project dependencies have any updates.
I've used
versions:dependency-updates-report
But I have some performance problems with it which I was unable to solve. Now I'm trying to use
org.owasp.dependency-check-maven:check
But I could not reproduce their example:
I'm getting similar look but I can't get 4 last columns (Next Version, Next Incremental, Next Minor, Next Major) which is most important for me.
How to reproduce this example?
(full disclosure - I am the founder of meterian)
You may want to consider a commercial product like sourceclear, snyk or meterian.
The meterian client is very easy to use, you can quickly check any maven or gradle project with no changes to the code: get the client, cd into the project folder, run it, see the results.
It's free for open source projects, badges are available for GitHub, and at the moment commercial use is not charged.
Hope this helps.
You will not reproduce the given report with org.owasp.dependency-check-maven because the shown report is created with versions-maven-plugin.
This are two different plugins.
org.owasp.dependency-check-maven is to find vulnerabilities according to the NVD in dependencies whereas versions-maven-plugin is for checking for newer versions, independent of vulnerabilities.
This is regarding Sonarqube 5.1.1 and JIRA 6
I'm working with Sonarqube's JIRA plugin for linking issues from Sonar to JIRA, and I was wondering if it would be possible to not only link issues to JIRA as the predefined JIRA user for Sonar, but if it would be possible to create the issues in JIRA (from Sonar still) as the user that is logged in and clicking the "link to JIRA" button on the issue.
My issue with how it's currently set up is that the reporter will then always be this predefined JIRA user for Sonar, and quite frankly it'd be much more useful if we also knew who was the one actually reporting the issues.
TL;DR I'm wondering if instead of a centralized, predefined JIRA user for Sonar, I can get each Sonar-User to also be able to report the issues.
We are trying to install a CI Platform with (Jenkins,sonar,eclipse ...).
So that every developer can make analysis on his code before commit, I'm wondering between two alternatives :
running local analysis with the sonar plugin.
install the different plugins that sonar use (findbug,pmd,checkstyle ...) and configure them to meet the sonar configuration.
I'm not sure which alternative to use? I used to work with findbugs,pmd, checkstyle in eclipse and they look great.
Can you tell me which is the best alternative?
Thanks in advance.
Regards.
With Sonar plugin you can manage the violations like:
Create a review
Mark a violations as false positive or fixed
View the hot classes and hot violations
View yours reviews
If you use separate plugins you have to go sonar web to do that.
The great advance of sonar is the reviews.
Other question is how many projects you have and will have. I currently work with more than 70 projects and many profiles. Is more simple to me run analysis with one plugin, because I need just add the server and find the project. With other plugin you need add the link for each project in each plugin configuration.
Why not install the Sonar Eclipse plugin?
This was designed to solve the following problems:
Sonar does not support parallel analysis of the same project. This issue rules out the option of each developer running Sonar locally. (See SONAR-2761, SONAR-3306)
You don't really want developers uploading metrics and source code into the Sonar database. They could be working on an uncommitted workspace and would therefore cause both inaccuracies and confusion if Sonar is being used for code review.
Sonar is really designed to be run from a continuous integration server (like Jenkins), building code that has been submitted onto a shared codestream (or branch)
The big advantages of using the Eclipse plugin are:
True local analysis, no updates of the Sonar database
Configuration of the other tools is retrieved from the Sonar server and jars automatically downloaded.
Centralized management of Sonar quality profiles
I am working on the daily builds using ant and jira for one of asp.net mvc3 project, I searched so many forums for this but I am not able to find any solution for this,
Is it possible to create daily builds using ant and jira (or any other tool) on the server which will result as following
www.example.com/build1
www.example.com/build2
www.example.com/build3
...
every build should be working
waiting for reply
Thanks
what you want is continuous integration. You probably want to go with Hudson or Jenkins. Then you can have ant or microsoft build tools to do the daily or hourly or whatever builds for you.
You can track the builds, also you can deploy the builds with specific IDs etc.
with JIRA you can track the bugs etc.