This is an example Javascript application suitable for demonstrating the analysis features of SonarQube.
There is no build per se. However for analysis to succeed you'll need node.js
installed.
Note the named dependencies in the Jenkinsfile
for SonarQube, the SonarScanner, and NodeJS. Appropriate global tools must be installed. For NodeJS, use the Jenkins plugin to add the global tool.
- Please fork the repository! Do not change this one!
- The file
myserver.js
in the root directory contains a commented-out code block. Uncomment, commit, and on a fresh scan you'll have New Code results including a vulnerability.