├── .gitignore ├── README.md ├── pom.xml └── src ├── main └── java │ └── uk │ └── gov │ └── justice │ └── digital │ └── sonar │ └── plugin │ └── containercheck │ ├── ContainerCheckConfiguration.java │ ├── ContainerCheckPlugin.java │ ├── ContainerCheckSensor.java │ ├── base │ ├── ContainerCheckConstants.java │ ├── ContainerCheckMetric.java │ └── ContainerCheckMetrics.java │ ├── model │ ├── Analysis.java │ ├── Severity.java │ └── Vulnerability.java │ ├── page │ └── ContainerCheckReportPage.java │ ├── parser │ ├── JsonReportParserHelper.java │ └── ReportParserException.java │ ├── reason │ ├── ContainerImageDependencyReason.java │ └── DependencyReason.java │ ├── report │ ├── JsonReportFile.java │ └── ReportFile.java │ └── rule │ └── KnownVulnerabilityRuleDefinition.java └── test ├── java └── uk │ └── gov │ └── justice │ └── digital │ └── sonar │ └── plugin │ └── containercheck │ ├── ContainerCheckPluginTest.java │ ├── ContainerCheckSensorTest.java │ ├── base │ └── ContainerCheckMetricTest.java │ ├── model │ ├── SeverityTest.java │ └── VulnerabilityTest.java │ ├── page │ └── ContainerCheckReportPageTest.java │ ├── parser │ └── JsonReportParserHelperTest.java │ ├── reason │ └── ContainerImageDependencyReasonTest.java │ ├── report │ └── JsonReportFileTest.java │ └── rule │ └── KnownVulnerabilityRuleDefinitionTest.java └── resources ├── Dockerfile └── trivy-sample.json /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/.gitignore -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/README.md -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/pom.xml -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckConfiguration.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckConfiguration.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckPlugin.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckPlugin.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckSensor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckSensor.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/base/ContainerCheckConstants.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/base/ContainerCheckConstants.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/base/ContainerCheckMetric.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/base/ContainerCheckMetric.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/base/ContainerCheckMetrics.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/base/ContainerCheckMetrics.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/Analysis.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/Analysis.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/Severity.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/Severity.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/Vulnerability.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/Vulnerability.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/page/ContainerCheckReportPage.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/page/ContainerCheckReportPage.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/parser/JsonReportParserHelper.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/parser/JsonReportParserHelper.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/parser/ReportParserException.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/parser/ReportParserException.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/reason/ContainerImageDependencyReason.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/reason/ContainerImageDependencyReason.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/reason/DependencyReason.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/reason/DependencyReason.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/report/JsonReportFile.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/report/JsonReportFile.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/report/ReportFile.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/report/ReportFile.java -------------------------------------------------------------------------------- /src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/rule/KnownVulnerabilityRuleDefinition.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/main/java/uk/gov/justice/digital/sonar/plugin/containercheck/rule/KnownVulnerabilityRuleDefinition.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckPluginTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckPluginTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckSensorTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/ContainerCheckSensorTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/base/ContainerCheckMetricTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/base/ContainerCheckMetricTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/SeverityTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/SeverityTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/VulnerabilityTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/model/VulnerabilityTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/page/ContainerCheckReportPageTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/page/ContainerCheckReportPageTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/parser/JsonReportParserHelperTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/parser/JsonReportParserHelperTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/reason/ContainerImageDependencyReasonTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/reason/ContainerImageDependencyReasonTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/report/JsonReportFileTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/report/JsonReportFileTest.java -------------------------------------------------------------------------------- /src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/rule/KnownVulnerabilityRuleDefinitionTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/java/uk/gov/justice/digital/sonar/plugin/containercheck/rule/KnownVulnerabilityRuleDefinitionTest.java -------------------------------------------------------------------------------- /src/test/resources/Dockerfile: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/test/resources/trivy-sample.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ministryofjustice/container-check-sonar-plugin/HEAD/src/test/resources/trivy-sample.json --------------------------------------------------------------------------------