Title: GitHub · Where software is built
Open Graph Title: OWASP-Benchmark/BenchmarkJava
X Title: OWASP-Benchmark/BenchmarkJava
Description: OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page. - OWASP-Benchmark/BenchmarkJava
Open Graph Description: OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST),...
X Description: OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST),...
Opengraph URL: https://github.com/OWASP-Benchmark/BenchmarkJava
X: @github
Domain: patch-diff.githubusercontent.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"runSonarQube.sh fail when starts to scan javascript files","articleBody":"When start scanning javascript files\r\n\r\nIt says that NodeJs binary could not be found.\r\n\r\nI tried to set `sonar.nodejs.executable=/usr/bin/node` and increate nodejs max old space size, but it didn't help, but logs changed.\r\n```\r\n11:12:15.295 INFO Sensor JavaScript/TypeScript analysis [javascript]\r\n11:12:15.302 DEBUG Deploying the bridge server into /tmp/.scannerwork/.sonartmp/bridge-bundle\r\n11:12:17.424 INFO 'sonar.nodejs.executable' is set. Skipping embedded Node.js runtime deployment.\r\n11:12:17.424 DEBUG Starting server\r\n11:12:17.426 DEBUG Creating Node.js process to start the bridge server on port 56365\r\n11:12:17.427 INFO Configured Node.js --max-old-space-size=4096.\r\n11:12:17.428 INFO Using Node.js executable /usr/bin/node from property sonar.nodejs.executable.\r\n11:12:17.428 DEBUG Checking Node.js version\r\n11:12:17.428 DEBUG Launching command /usr/bin/node -v\r\n11:12:17.440 DEBUG Using Node.js v18.20.2.\r\n11:12:17.440 DEBUG Launching command /usr/bin/node --max-old-space-size=4096 /tmp/.scannerwork/.sonartmp/bridge-bundle/package/bin/server 56365 127.0.0.1 /tmp/.scannerwork true false false\r\n11:12:20.773 INFO Memory configuration: OS (11959 MB), Node.js (4144 MB).\r\n11:12:20.774 DEBUG Starting the bridge server\r\n11:12:20.793 DEBUG The bridge server is listening on port 56365\r\n11:12:20.848 DEBUG The worker thread is running\r\n11:12:35.788 DEBUG Shutting down the worker\r\n11:12:35.792 INFO Rule | Time (ms) | Relative\r\n11:12:35.792 INFO :----|----------:|--------:\r\n11:12:35.812 DEBUG The worker thread exited with code 0\r\n11:12:35.814 DEBUG The bridge server shut down\r\n11:12:35.815 INFO Rule | Time (ms) | Relative\r\n11:12:35.815 INFO :----|----------:|--------:\r\n11:17:17.457 ERROR Failed to start the bridge server (300s timeout)\r\norg.sonar.plugins.javascript.nodejs.NodeCommandException: Failed to start the bridge server (300s timeout)\r\n\tat org.sonar.plugins.javascript.bridge.BridgeServerImpl.startServer(BridgeServerImpl.java:209)\r\n\tat org.sonar.plugins.javascript.bridge.BridgeServerImpl.startServerLazily(BridgeServerImpl.java:312)\r\n\tat org.sonar.plugins.javascript.analysis.AbstractBridgeSensor.execute(AbstractBridgeSensor.java:76)\r\n\tat org.sonar.scanner.sensor.AbstractSensorWrapper.analyse(AbstractSensorWrapper.java:64)\r\n\tat org.sonar.scanner.sensor.ModuleSensorsExecutor.execute(ModuleSensorsExecutor.java:88)\r\n\tat org.sonar.scanner.sensor.ModuleSensorsExecutor.lambda$execute$1(ModuleSensorsExecutor.java:61)\r\n\tat org.sonar.scanner.sensor.ModuleSensorsExecutor.withModuleStrategy(ModuleSensorsExecutor.java:79)\r\n\tat org.sonar.scanner.sensor.ModuleSensorsExecutor.execute(ModuleSensorsExecutor.java:61)\r\n\tat org.sonar.scanner.scan.SpringModuleScanContainer.doAfterStart(SpringModuleScanContainer.java:82)\r\n\tat org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)\r\n\tat org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)\r\n\tat org.sonar.scanner.scan.SpringProjectScanContainer.scan(SpringProjectScanContainer.java:204)\r\n\tat org.sonar.scanner.scan.SpringProjectScanContainer.scanRecursively(SpringProjectScanContainer.java:200)\r\n\tat org.sonar.scanner.scan.SpringProjectScanContainer.doAfterStart(SpringProjectScanContainer.java:173)\r\n\tat org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)\r\n\tat org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)\r\n\tat org.sonar.scanner.bootstrap.SpringScannerContainer.doAfterStart(SpringScannerContainer.java:351)\r\n\tat org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)\r\n\tat org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)\r\n\tat org.sonar.scanner.bootstrap.SpringGlobalContainer.doAfterStart(SpringGlobalContainer.java:144)\r\n\tat org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)\r\n\tat org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)\r\n\tat org.sonar.scanner.bootstrap.ScannerMain.runScannerEngine(ScannerMain.java:149)\r\n\tat org.sonar.scanner.bootstrap.ScannerMain.run(ScannerMain.java:66)\r\n\tat org.sonar.scanner.bootstrap.ScannerMain.main(ScannerMain.java:52)\r\n\r\n11:17:17.457 INFO Hit the cache for 0 out of 0\r\n11:17:17.459 INFO Miss the cache for 0 out of 0\r\n11:17:18.331 ERROR Error during SonarScanner Engine execution\r\njava.lang.IllegalStateException: Error while running Node.js. A supported version of Node.js is required for running the analysis of JS/TS files. Please make sure a supported version of Node.js is available in the PATH or an executable path is provided via 'sonar.nodejs.executable' property. Alternatively, you can exclude JS/TS files from your analysis using the 'sonar.exclusions' configuration property. See the docs for configuring the analysis environment: https://docs.sonarsource.com/sonarqube/latest/analyzing-source-code/languages/javascript-typescript-css/\r\n\tat org.sonar.plugins.javascript.analysis.AbstractBridgeSensor.execute(AbstractBridgeSensor.java:89)\r\n\tat org.sonar.scanner.sensor.AbstractSensorWrapper.analyse(AbstractSensorWrapper.java:64)\r\n\tat org.sonar.scanner.sensor.ModuleSensorsExecutor.execute(ModuleSensorsExecutor.java:88)\r\n\tat org.sonar.scanner.sensor.ModuleSensorsExecutor.lambda$execute$1(ModuleSensorsExecutor.java:61)\r\n\tat org.sonar.scanner.sensor.ModuleSensorsExecutor.withModuleStrategy(ModuleSensorsExecutor.java:79)\r\n\tat org.sonar.scanner.sensor.ModuleSensorsExecutor.execute(ModuleSensorsExecutor.java:61)\r\n\tat org.sonar.scanner.scan.SpringModuleScanContainer.doAfterStart(SpringModuleScanContainer.java:82)\r\n\tat org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)\r\n\tat org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)\r\n\tat org.sonar.scanner.scan.SpringProjectScanContainer.scan(SpringProjectScanContainer.java:204)\r\n\tat org.sonar.scanner.scan.SpringProjectScanContainer.scanRecursively(SpringProjectScanContainer.java:200)\r\n\tat org.sonar.scanner.scan.SpringProjectScanContainer.doAfterStart(SpringProjectScanContainer.java:173)\r\n\tat org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)\r\n\tat org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)\r\n\tat org.sonar.scanner.bootstrap.SpringScannerContainer.doAfterStart(SpringScannerContainer.java:351)\r\n\tat org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)\r\n\tat org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)\r\n\tat org.sonar.scanner.bootstrap.SpringGlobalContainer.doAfterStart(SpringGlobalContainer.java:144)\r\n\tat org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:226)\r\n\tat org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:205)\r\n\tat org.sonar.scanner.bootstrap.ScannerMain.runScannerEngine(ScannerMain.java:149)\r\n\tat org.sonar.scanner.bootstrap.ScannerMain.run(ScannerMain.java:66)\r\n\tat org.sonar.scanner.bootstrap.ScannerMain.main(ScannerMain.java:52)\r\nCaused by: org.sonar.plugins.javascript.nodejs.NodeCommandException: Failed to start the bridge server (300s timeout)\r\n\tat org.sonar.plugins.javascript.bridge.BridgeServerImpl.startServer(BridgeServerImpl.java:209)\r\n\tat org.sonar.plugins.javascript.bridge.BridgeServerImpl.startServerLazily(BridgeServerImpl.java:312)\r\n\tat org.sonar.plugins.javascript.analysis.AbstractBridgeSensor.execute(AbstractBridgeSensor.java:76)\r\n\t... 22 common frames omitted\r\n\r\n11:17:18.334 DEBUG Cleanup org.eclipse.jgit.util.FS$FileStoreAttributes$$Lambda$345/0x00007fe6dc2a6f00@7f9e1534 during JVM shutdown\r\n11:17:18.698 DEBUG Java command exited with code 1\r\n11:17:18.698 INFO EXECUTION FAILURE\r\n11:17:18.700 INFO Total time: 7:36.047s\r\nWaiting for SonarQube CE to finish task\r\n```\r\n\r\nMy version of running sonarqube-cli\r\n```shell\r\ndocker run --env SONAR_SCANNER_OPTS=-Xmx4g --net=host --rm -v ~/.m2:/root/.m2 -v \"$(pwd)\":\"$(pwd)\" -w \"$(pwd)\" sonarsource/sonar-scanner-cli \\\r\n -Dsonar.java.binaries=\"target\" -Dsonar.projectKey=\"$sonar_project\" \\\r\n -Dsonar.host.url=\"$sonar_host\" \\\r\n -Dsonar.login=\"$sonar_token\" \\\r\n -Dsonar.sources=\"src\" \\\r\n -Dsonar.exclusions=\".horusec/**,owasp-benchmark/**,results/**,scorecard/**,scripts/**,tools/**,VMs/**\" \\\r\n -Dsonar.nodejs.executable=\"/usr/bin/node\" \\\r\n -Dsonar.javascript.node.maxspace=\"4096\" \\\r\n -Dsonar.verbose=true\r\n```\r\n\r\nIf this bug related to SonarQube not runSonarQube.sh script tell me please, this is my first interaction with sonarqube.\r\n","author":{"url":"https://github.com/paraddise","@type":"Person","name":"paraddise"},"datePublished":"2024-11-13T11:21:19.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/235/BenchmarkJava/issues/235"}
| route-pattern | /:user_id/:repository/issues/:id(.:format) |
| route-controller | issues |
| route-action | show |
| fetch-nonce | v2:2ddcf4ca-97a0-4dd8-26ae-85b7ed058a67 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | 8958:3E6A40:15E935C:1F3AFFD:6978DEAA |
| html-safe-nonce | d5e8a477d0ee89fa2b73bbd65eb2c107b38dabc6a69eb59c3b619abe07b1d8d1 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4OTU4OjNFNkE0MDoxNUU5MzVDOjFGM0FGRkQ6Njk3OERFQUEiLCJ2aXNpdG9yX2lkIjoiNDU0NjgwMzIzNjQ5MjMyNTU0IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | 218dc160edae34984192b83bfd1439c37909aad470153d7d0a6afc3c9ba041f9 |
| hovercard-subject-tag | repository:33565372 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/OWASP-Benchmark/BenchmarkJava/issues/235 |
| twitter:image | https://opengraph.githubassets.com/182b7b876039d69826af3372835c0f2ffeff51720f19ea112c2ed3a4de0a56b6/OWASP-Benchmark/BenchmarkJava |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/182b7b876039d69826af3372835c0f2ffeff51720f19ea112c2ed3a4de0a56b6/OWASP-Benchmark/BenchmarkJava |
| og:image:alt | OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST),... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 8a71ca1f7ab5436216e1df86f398ef7a51ed3152c90e3f7332fc70cf97fcb9d6 |
| turbo-cache-control | no-cache |
| go-import | github.com/OWASP-Benchmark/BenchmarkJava git https://github.com/OWASP-Benchmark/BenchmarkJava.git |
| octolytics-dimension-user_id | 80600360 |
| octolytics-dimension-user_login | OWASP-Benchmark |
| octolytics-dimension-repository_id | 33565372 |
| octolytics-dimension-repository_nwo | OWASP-Benchmark/BenchmarkJava |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 33565372 |
| octolytics-dimension-repository_network_root_nwo | OWASP-Benchmark/BenchmarkJava |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | eaed570eead52a9920afef75dc3eb6d826fdc5ef |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width