Merge pull request #832 from snyk/feat/add-sonarqube-to-apprisk-conne…

…ction-type feat: add sonarqube to apprisk connection type [IA-573]
snyk · Sep 3, 2024 · 840e360 · 840e360
2 parents 0585682 + 6f4a181
commit 840e360
Show file tree

Hide file tree

Showing 2 changed files with 68 additions and 2 deletions.
diff --git a/config.default.json b/config.default.json
@@ -66,18 +66,30 @@
           "headers": {
             "x-broker-content-type": "application/x-www-form-urlencoded"
           }
+        },
+        {
+          "url": "https://$SONARQUBE_HOST_URL/system/ping",
+          "method": "GET",
+          "auth": {
+            "type": "header",
+            "name": "Authorization",
+            "value": "Bearer $SONARQUBE_API_TOKEN"
+          }
         }
       ],
       "default": {
         "CHECKMARX": "$CHECKMARX",
         "CHECKMARX_USERNAME": "$CHECKMARX_USERNAME",
-        "CHECKMARX_PASSWORD": "$CHECKMARX_PASSWORD"
+        "CHECKMARX_PASSWORD": "$CHECKMARX_PASSWORD",
+        "SONARQUBE_HOST_URL": "$SONARQUBE_HOST_URL",
+        "SONARQUBE_API_TOKEN": "$SONARQUBE_API_TOKEN"
       },
       "required": {
         "CHECKMARX": "checkmarx.customer.com",
         "CHECKMARX_USERNAME": "<username>",
         "CHECKMARX_PASSWORD": "<password>",
-        "BROKER_CLIENT_URL": "https://<broker.client.hostname>:<port>"
+        "SONARQUBE_HOST_URL": "<sonarqube-host-url>",
+        "SONARQUBE_API_TOKEN": "<sonarqube-api-token>"
       }
     },
     "artifactory": {

diff --git a/defaultFilters/apprisk.json b/defaultFilters/apprisk.json
@@ -31,6 +31,60 @@
         "method": "GET",
         "path": "/cxrestapi/sast/scans/:id/resultsStatistics",
         "origin": "https://${CHECKMARX}"
+      },
+      {
+        "//": "Provide health status of SonarQube",
+        "method": "GET",
+        "path": "/api/system/ping",
+        "origin": "https://${SONARQUBE_HOST_URL}"
+      },
+      {
+        "//": "Search for components",
+        "method": "GET",
+        "path": "/api/components/search",
+        "origin": "https://${SONARQUBE_HOST_URL}"
+      },
+      {
+        "//": "Search for issues",
+        "method": "GET",
+        "path": "/api/issues/search",
+        "origin": "https://${SONARQUBE_HOST_URL}"
+      },
+      {
+        "//": "Get DevOps Platform binding of a given project",
+        "method": "GET",
+        "path": "/api/alm_settings/get_binding",
+        "origin": "https://${SONARQUBE_HOST_URL}"
+      },
+      {
+        "//": "List links of a project",
+        "method": "GET",
+        "path": "/api/project_links/search",
+        "origin": "https://${SONARQUBE_HOST_URL}"
+      },
+      {
+        "//": "List the branches of a project or application",
+        "method": "GET",
+        "path": "/api/project_branches/list",
+        "origin": "https://${SONARQUBE_HOST_URL}"
+      },
+      {
+        "//": "Search for Security Hotpots",
+        "method": "GET",
+        "path": "/api/hotspots/search",
+        "origin": "https://${SONARQUBE_HOST_URL}"
+      },
+      {
+        "//": "Provides the details of a Security Hotspot",
+        "method": "GET",
+        "path": "/api/hotspots/show",
+        "origin": "https://${SONARQUBE_HOST_URL}"
+      },
+      {
+        "//": "Search for a collection of relevant rules matching a specified query",
+        "method": "GET",
+        "path": "/api/rules/search",
+        "origin": "https://${SONARQUBE_HOST_URL}"
       }
     ]
   }