Skip to content

BUILD-9090 remove Mend/Whitesource check#105

Merged
julien-carsique-sonarsource merged 1 commit intomasterfrom
feat/jcarsique/BUILD-9090-disableMend
Sep 16, 2025
Merged

BUILD-9090 remove Mend/Whitesource check#105
julien-carsique-sonarsource merged 1 commit intomasterfrom
feat/jcarsique/BUILD-9090-disableMend

Conversation

@julien-carsique-sonarsource
Copy link
Copy Markdown
Contributor

@julien-carsique-sonarsource julien-carsique-sonarsource commented Sep 16, 2025

BUILD-9090 remove Mend/Whitesource check

Add a notice as of version 3.0.0 and the requirement for projects to use https://github.com/SonarSource/ci-github-actions/, Next, or Unified Dogfooding.

Tested OK with sonar-dummy https://github.com/SonarSource/gh-action_releasability/actions/runs/17759643441/job/50469246490:

echo "❌ CheckManifestValues - java.lang.IllegalStateException: can't download file https://repox.jfrog.io/repox/sonarsource-private-builds/com/sonarsource/dummy/sonar-dummy-plugin/15.0.2.8497/sonar-dummy-plugin-15.0.2.8497.jar code 404
✅ Jira
❌ QA - java.lang.NullPointerException: Cannot invoke "java.util.List.stream()" because "this.statuses" is null
✅ CheckDependencies
✓ CheckPeacheeLanguagesStatistics
✅ QualityGate
✓ ParentPOM
✓ GitHub "

Regardless of the check errors, the WhiteSource/Mend check is not present anymore.

@julien-carsique-sonarsource julien-carsique-sonarsource force-pushed the feat/jcarsique/BUILD-9090-disableMend branch 2 times, most recently from 151f2c9 to a388f60 Compare September 16, 2025 13:37
@julien-carsique-sonarsource julien-carsique-sonarsource marked this pull request as ready for review September 16, 2025 13:39
Copilot AI review requested due to automatic review settings September 16, 2025 13:39
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR removes the WhiteSource/Mend security check from the releasability system and adds documentation explaining the change. The WhiteSource check is being deprecated in favor of Sonar Quality Gate with Dependency Risks for projects using CI GitHub Actions, Next, or Unified Dogfooding.

Key changes:

  • Removed WhiteSource check from the list of required checks
  • Updated test files to remove WhiteSource-related test data
  • Added documentation explaining the removal and migration path

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File Description
src/releasability/releasability_service.py Removed "WhiteSource" from the list of required checks
releasability-status/tests/main_test.py Removed WhiteSource test data from all test cases
action.yml Removed WhiteSource output definition from GitHub Action
README.md Added version 3 migration notes and reorganized documentation structure

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@julien-carsique-sonarsource julien-carsique-sonarsource force-pushed the feat/jcarsique/BUILD-9090-disableMend branch from a388f60 to 12ceac5 Compare September 16, 2025 13:45
@julien-carsique-sonarsource julien-carsique-sonarsource force-pushed the feat/jcarsique/BUILD-9090-disableMend branch from 12ceac5 to a582fd1 Compare September 16, 2025 13:54
@sonarqubecloud
Copy link
Copy Markdown

🤖 Pull Request summary

Updates markdownlint config and removes WhiteSource check references.

Configuration: Increased markdown line length limit from 120 to 140 characters
Documentation: Enhanced README with new sections for check lists, warnings, and reorganized usage examples
Code cleanup: Removed WhiteSource check references from action outputs, tests, and service code
Formatting: Improved YAML indentation consistency throughout documentation examples

Review focus: Verify that removing WhiteSource references doesn't break existing workflows and confirm the new line length limit aligns with team standards.

💬 Please send your feedback

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@julien-carsique-sonarsource julien-carsique-sonarsource merged commit bd50468 into master Sep 16, 2025
7 checks passed
@julien-carsique-sonarsource julien-carsique-sonarsource deleted the feat/jcarsique/BUILD-9090-disableMend branch September 16, 2025 15:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants