From a0d29344be8f0999fc585ce4d67a03868f650e73 Mon Sep 17 00:00:00 2001 From: Sascha Knoop Date: Tue, 18 Aug 2026 21:46:55 +0200 Subject: [PATCH 1/5] fix sonarqube script --- scripts/runSonarQube.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/scripts/runSonarQube.sh b/scripts/runSonarQube.sh index 5587000a48..40e1365214 100755 --- a/scripts/runSonarQube.sh +++ b/scripts/runSonarQube.sh @@ -64,11 +64,12 @@ echo "Starting scan... (might take some time!)" container_ip=$(docker inspect "$container_name" | jq -r '.[0].NetworkSettings.Networks.bridge.IPAddress' ) sonar_docker_host="http://$container_ip:$sonar_internal_port" -docker run --env SONAR_SCANNER_OPTS=-Xmx4g --rm -v ~/.m2:/root/.m2 -v "$(pwd)":"$(pwd)" -w "$(pwd)" sonarsource/sonar-scanner-cli \ +docker run --env SONAR_SCANNER_OPTS=-Xmx4g --rm -v ~/.m2:/root/.m2 -v "$(pwd)":/benchmark -w "/benchmark" sonarsource/sonar-scanner-cli \ + -Dsonar.projectBaseDir="/benchmark" \ -Dsonar.java.binaries="target" \ -Dsonar.projectKey="$sonar_project" \ -Dsonar.host.url="$sonar_docker_host" \ - -Dsonar.login="$sonar_token" \ + -Dsonar.token="$sonar_token" \ -Dsonar.sources="src" \ -Dsonar.exclusions="results/**,scorecard/**,scripts/**,tools/**,VMs/**,**/*.js" From 7840608b3fb66cee1b0fb0c6d1819c4d923b5068 Mon Sep 17 00:00:00 2001 From: Sascha Knoop Date: Tue, 18 Aug 2026 22:50:17 +0200 Subject: [PATCH 2/5] force compile --- scripts/runSonarQube.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/runSonarQube.sh b/scripts/runSonarQube.sh index 40e1365214..97a7ad893f 100755 --- a/scripts/runSonarQube.sh +++ b/scripts/runSonarQube.sh @@ -83,6 +83,7 @@ done echo "" echo "Generating report..." +mvn compile mvn exec:java -Dexec.mainClass="org.owasp.benchmark.report.sonarqube.SonarReport" echo "Shutting down SonarQube..." From a3783db58f46f9764efd9594a68fb3fd9190b40c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Aug 2026 11:03:38 +0000 Subject: [PATCH 3/5] Bump com.github.spotbugs:spotbugs from 4.10.3 to 4.10.4 Bumps [com.github.spotbugs:spotbugs](https://github.com/spotbugs/spotbugs) from 4.10.3 to 4.10.4. - [Release notes](https://github.com/spotbugs/spotbugs/releases) - [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md) - [Commits](https://github.com/spotbugs/spotbugs/compare/4.10.3...4.10.4) --- updated-dependencies: - dependency-name: com.github.spotbugs:spotbugs dependency-version: 4.10.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 4b887b51c9..466c267058 100644 --- a/pom.xml +++ b/pom.xml @@ -1262,7 +1262,7 @@ 3.6.10.Final 4.10.3.0 - 4.10.3 + 4.10.4 5.3.39 From 9a0a3be0ab0b2e29f8e5d729c9a6c20595d92e2e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Aug 2026 11:03:53 +0000 Subject: [PATCH 4/5] Bump com.github.spotbugs:spotbugs-maven-plugin from 4.10.3.0 to 4.10.4.0 Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.10.3.0 to 4.10.4.0. - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.3.0...spotbugs-maven-plugin-4.10.4.0) --- updated-dependencies: - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-version: 4.10.4.0 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 4b887b51c9..19d67c1dde 100644 --- a/pom.xml +++ b/pom.xml @@ -1261,7 +1261,7 @@ 2.1.0 3.6.10.Final - 4.10.3.0 + 4.10.4.0 4.10.3 5.3.39 From 4534277477d0510461e46dbdc14de406dd70b561 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Aug 2026 11:06:31 +0000 Subject: [PATCH 5/5] Bump github/codeql-action from 4.37.7 to 4.37.8 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.7 to 4.37.8. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.7...v4.37.8) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.37.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql-analysis.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 77f3d4c43b..c0c7ba69fc 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -34,7 +34,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.7 + uses: github/codeql-action/init@v4.37.8 with: languages: ${{ matrix.language }} queries: security-extended, security-experimental, security-and-quality @@ -43,7 +43,7 @@ jobs: run: mvn -DskipTests=true install - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.7 + uses: github/codeql-action/analyze@v4.37.8 - name: Upload Output uses: actions/upload-artifact@v7