docs(security): SonarQube triage inventory (106 issues) - #52
docs(security): SonarQube triage inventory (106 issues)#52marlon-costa-dc wants to merge 2 commits into
Conversation
Inventario das issues SonarCloud com severidade, tipo, regra, componente e linha. Totais: BLOCKER 15, CRITICAL 18, MAJOR 44, MINOR 29 Tipos: VULNERABILITY 48, BUG 0, CODE_SMELL 58 Bead: mro-2wjm.23 Nenhuma alteracao de codigo de producao.
|
Important Review skippedDraft detected. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
…rule messages Cada achado agora traz: - codigo real numerado extraido da worktree (linha >>> = sink) - mensagem completa da regra (descricao do problema e do fix) - CWE/classe de vulnerabilidade e effort onde disponivel
|
2 participants
Triagem SonarCloud — inventário
106 issues — BLOCKER 15, CRITICAL 18, MAJOR 44, MINOR 29
Tipos: VULNERABILITY 48, BUG 0, CODE_SMELL 58
Bead:
mro-2wjm.23Conteúdo
docs/security/sonarqube-triage.md: severidade, tipo, regra, componente e linha de cada issue, com coluna de decisão (corrigir/falso-positivo/risco-aceito).Nenhuma alteração de código.
Prioridade: BLOCKER → CRITICAL → VULNERABILITY → MAJOR. CODE_SMELL em volume sugere correção de padrão na causa raiz, não issue a issue.
Dados brutos:
~/sonarqube-violations/by-repo/flext-sh_flext-tests.jsonSummary by cubic
Adds
docs/security/sonarqube-triage.md, an inventory of 106 SonarCloud issues forflext-sh/flext-testswith per-issue details, now enriched with real code snippets (>>>marks the sink), full rule messages, and CWE/effort.Documentation-only; includes a decision column (
corrigir/falso-positivo/risco-aceito) and triage guidance prioritizing BLOCKER, CRITICAL, and all vulnerabilities.Written for commit cbcc611. Summary will update on new commits.