Align cpp module coordinates and wire C++ aggregator into scanner manager#411
Align cpp module coordinates and wire C++ aggregator into scanner manager#411Divyateja2709 wants to merge 18 commits into
Conversation
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
This keeps C/C++ integration consistent by matching artifact/version wiring and ensuring C++ detected nodes participate in global output aggregation and reset lifecycle. Co-authored-by: Cursor <cursoragent@cursor.com>
|
Hi @Divyateja2709, Thank you for your PR and for the time and effort you put into contributing to CBOMkit—we truly appreciate your interest. You may have noticed that we are already working on adding C/C++ support to sonar-cryptography in PR #377. This approach differs from yours, as it relies on Sonar’s native C/C++ support package rather than ANTLR, similar to how the existing Java module is implemented. Work on PR #377 is already quite advanced, and at this stage we are leaning toward this approach because we expect it to provide stronger support for cross-file symbol tracing through the Sonar infrastructure. That said, we will keep your PR open for now until a final decision is made. |
|
Hi @san-zrl sir, Thank you for the clarification and for keeping the PR open. I actually made these PRs as part of my contributions for the Linux Foundation Mentorship program. I explored this ANTLR-based approach and worked on multiple related PRs around it. Could you please confirm if the mentorship/project is still open for contributors or mentees to continue working on it? Thank you once again. |
|
Hi @Divyateja2709,
I suspected that. We are still in the application phase for the mentorship program which is open until May 22. After that the mentee will be selected from the applications we received. Independently of the mentorship program we always welcome contributions (bugs, fixes, new features). |
|
Hi @san-zrl sir, Thank you for the update. I’ve already submitted my resume and cover letter for the mentorship program. I’m currently pursuing a Bachelor’s in Computer Science with a minor in Cybersecurity and was previously a Cybersecurity Intern at Deloitte. I’ve also worked on a small post-quantum cryptography project, so I’m really excited about this opportunity. Would you recommend that I go through PR #377 and try contributing in that direction? Also, are there any particular areas where I can prepare better or contribute more effectively? Thank you once again. |
Summary
cpp/pom.xmlparent version and artifactId.CppAggregatorto store/reset C/C++ detected nodes consistently with other language modules.ScannerManageraggregation and reset flow.Test plan
mvn -pl cpp,sonar-cryptography-plugin -am -DskipTests package