missing documentation

[javabeanz]

This could be a great project but i need more info :
what does this project add to the offical docker image https://hub.docker.com/_/sonarqube/ ?
what version of sonarqube is used ?

[VinodAnandan]

Hi @javabeanz

Thank you very much for your comments.

Yes, documentation is already in my plan. I will create a detailed document soon.

The current OWASP/SonarQube docker image ( https://hub.docker.com/r/owasp/sonarqube/ ) has SonarQube 7.2.1 + several community plugins to enable SAST + Security enhancement to work on OpenShift.

Detailed list of community plugins can be found in the following Dockerfile

https://github.com/OWASP/sonarqube/blob/master/docker/Dockerfile

I will soon update SonarQube and the plugins to the latest version (SonarQube 7.3). There are so many things to do (proper versioning, auto-generated Quality Profiles for SAST, Production deployment manuals, Kubernetes/OpenShift support, etc.)

If you need more information, please let me know.

Thanks,

Vinod

[ewoks]

Any updates?
Is v7.2.1 in the latest image? Readme,md info would already be much better until detailed documentation is added.
In addition, docker run is missing volume configuration which implies that no data will be persisted. No word of MySql or PostgreSQL worries me a little bit too..
Was that intentional or this part got forgotten too?
10q

[VinodAnandan]

@ewoks PostgreSQL is the recommended DB. The SonarSource has discounted the support for MySql.

https://community.sonarsource.com/t/end-of-life-of-mysql-support/8667

If you want to run the project in production, you may run the docker image or create a similar docker image but you should use external DB services like PostgreSQL. If you are interested in contributing to the documentation, I am happy to review it. Alternatively, you can also use the official sonarqube documentation ( https://docs.sonarqube.org/ )