Update README with a note which describes how to import a SonarQube report (#572)

This commit is contained in:
Cosmin Cojocar 2021-02-11 12:10:44 +01:00 committed by GitHub
parent 897c203e62
commit 2777e5065e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -300,6 +300,8 @@ file. The output format is controlled by the `-fmt` flag, and the output file is
$ gosec -fmt=json -out=results.json *.go
```
**Note:** gosec generates the [generic issue import format](https://docs.sonarqube.org/latest/analysis/generic-issue/) for SonarQube, and a report has to be imported into SonarQube using `sonar.externalIssuesReportPaths=artifacts/test/gosec-report.json`.
## Development
### Build