gradeloop-core-v2/sonar-project.properties at main · 4yrg/gradeloop-core-v2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
sonar.projectKey=4yrg_gradeloop-core-v2
sonar.organization=4yrg

# Project metadata
sonar.projectName=GradeLoop Core V2
sonar.projectVersion=1.0

# Source code settings
sonar.sources=packages,apps
sonar.tests=packages,apps
sonar.sourceEncoding=UTF-8

# Python-specific settings
sonar.python.version=3.11

# Coverage settings - Point to coverage reports
sonar.python.coverage.reportPaths=**/coverage.xml
sonar.go.coverage.reportPaths=**/coverage.out

# Exclude test files from duplications
sonar.cpd.exclusions=**/test_*.py,**/*_test.py,**/tests/**

# Test file patterns
sonar.test.inclusions=**/test_*.py,**/*_test.py,**/tests/**

# Exclusions - Don't analyze these
sonar.exclusions=\
  **/__pycache__/**,\
  **/*.pyc,\
  **/venv/**,\
  **/.venv/**,\
  **/env/**,\
  **/ENV/**,\
  **/node_modules/**,\
  **/vendor/**,\
  **/.pytest_cache/**,\
  **/.ruff_cache/**,\
  **/*.egg-info/**,\
  **/dist/**,\
  **/build/**,\
  **/htmlcov/**,\
  **/.coverage,\
  **/coverage.xml

# Security hotspots - Ignore test files for security checks
sonar.security.hotspots.file.exclusions=**/test_*.py,**/*_test.py,**/tests/**

# Ignore specific security rules in test files
sonar.issue.ignore.multicriteria=e1,e2,e3,e4

# Hardcoded credentials in test files
sonar.issue.ignore.multicriteria.e1.ruleKey=python:S2068
sonar.issue.ignore.multicriteria.e1.resourceKey=**/test_*.py

# Hardcoded secrets in test files
sonar.issue.ignore.multicriteria.e2.ruleKey=python:S6437
sonar.issue.ignore.multicriteria.e2.resourceKey=**/test_*.py

# Hardcoded IP addresses in test files
sonar.issue.ignore.multicriteria.e3.ruleKey=python:S1313
sonar.issue.ignore.multicriteria.e3.resourceKey=**/test_*.py

# Predictable pseudo-random in tests (it's okay for tests)
sonar.issue.ignore.multicriteria.e4.ruleKey=python:S2245
sonar.issue.ignore.multicriteria.e4.resourceKey=**/test_*.py