okorach / sonar-tools Goto Github PK

Some issues are security problems, some are lack of best practices, some are performance related etc...

When logging HTTP request the token is entirely obfuscated instead of displaying part of the token head and tail

Right now sonar-housekeeper audits a lot of stuff, then filter out what is useless. This is not effective as we make plenty of checks that we don't use.

Branches not analyzed since a while are probably dead branches and should be deleted

sonar-tools seems more appropriate, more consistent with the rest of the SonarQube ecosystem than sonarqube-tools

Only 1 global admin group
Max 3 global admin users
Max 2 QG admin groups / 0 users
Max 2 QP admin groups / 0 users
Max 1 run analysis groups / 3 users
Max 2 create project groups / 0 users

Default should be dry run
Documentation should clarify that other mode kick in only when changing something (CRUD) in SonarQube

Logging is a bit un-even, let's make it nice and clean