update sonar-scanner and cnes-report

Author: henrjk

CHANGELOG.md

@@ -19,6 +19,9 @@ listed in the changelog.
 
 - sonar-scanner does not start properly: java is lacking tzdb.dat ([#723](https://github.com/opendevstack/ods-pipeline/issues/723))
 
+- update sonar-scanner and cnes-report ([#725](https://github.com/opendevstack/ods-pipeline/issues/725))
+
+
 ## [0.13.2] - 2023-07-18
 
 ### Fixed

build/package/Dockerfile.sonar

@@ -4,8 +4,8 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 USER root
 WORKDIR /usr/src/app
 
-ENV SONAR_SCANNER_VERSION=4.6.2.2472 \
-    CNES_REPORT_VERSION=4.0.0
+ENV SONAR_SCANNER_VERSION=4.8.0.2856 \
+    CNES_REPORT_VERSION=4.2.0
 
 # Build Go binary.
 COPY go.mod .
@@ -37,7 +37,7 @@ ENV SONAR_EDITION="community" \
     JAVA_HOME=/usr/lib/jvm/jre-11
 
 RUN microdnf install --nodocs java-11-openjdk-headless tzdata-java which && microdnf clean all
- # tzdata-java was missing unless explicitly installed: see https://stackoverflow.com/a/76848186
+# tzdata-java was missing unless explicitly installed: see https://stackoverflow.com/a/76848186
 
 COPY --from=builder /usr/local/bin/sonar /usr/local/bin/sonar
 COPY --from=builder /usr/local/sonar-scanner-cli /usr/local/sonar-scanner-cli

docs/design/software-design-specification.adoc

@@ -557,13 +557,13 @@ a| The script installs the Helm chart located in `deploy/ods-pipeline`. Further,
 
 | SDS-EXT-7
 | sonar-scanner
-| 4.6
+| 4.8
 | General purpose SonarQube scanner
 | https://github.com/SonarSource/sonar-scanner-cli
 
 | SDS-EXT-8
 | cnes-report
-| 4.0
+| 4.2
 | Exports code analysis from a SonarQube server in various file formats.
 | https://github.com/cnescatlab/sonar-cnes-report