sonar-training-app

This is an example Javascript application suitable for demonstrating the analysis features of SonarQube.

Build requirements

There is no build per se. However for analysis to succeed you'll need node.js installed.

Building with Jenkins

Note the named dependencies in the Jenkinsfile for SonarQube, the SonarScanner, and NodeJS. Appropriate global tools must be installed. For NodeJS, use the Jenkins plugin to add the global tool.

Making changes/showing New Code scans

• Please fork the repository! Do not change this one!
• The file myserver.js in the root directory contains a commented-out code block. Uncomment, commit, and on a fresh scan you'll have New Code results including a vulnerability.