corporate proxy download does not work (since 2.8.2)

[t800hk]

Hi @bellingard ,

After changing from download package to node-downloader-helper our jobs are failing with the following error:

user@host:$ npx sonarqube-scanner ...
npx: installed 86 in 8.116s
[15:05:54] Starting analysis...
[15:05:54] Checking if executable exists: /home//.sonar/native-sonar-scanner/sonar-scanner-4.5.0.2216-linux/bin/sonar-scanner
[15:05:54] Could not find executable in "/home//.sonar/native-sonar-scanner".
[15:05:54] Proceed with download of the platform binaries for SonarScanner...
[15:05:54] Creating /home//.sonar/native-sonar-scanner
[15:05:54] Downloading from https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-4.5.0.2216-linux.zip
[15:05:54] (executable will be saved in cache folder: /home//.sonar/native-sonar-scanner)
[15:05:56] ERROR: impossible to download and extract binary: connect EHOSTUNREACH *****:443
[15:05:56] SonarScanner binaries probably don't exist for your OS (linux).
[15:05:56] In such situation, the best solution is to install the standard SonarScanner (requires a JVM).
[15:05:56] Check it out at https://redirect.sonarsource.com/doc/install-configure-scanner.html

When using "npx [email protected]" everything works fine.

We use corporate proxy and the "wget https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-4.5.0.2216-linux.zip" works fine via the proxy (only).

I suppose either sonarqube-scanner-npm should be enhanced with proxy handling code (before using node-downloader-helper) or node-downloader-helper should be enhanced to transparently use http proxy if defined via env variable.

What do you think?

Thx,
Zoli

-- update after a few hours investigfation:

I managed to implement a workaround (until the code is enhanced):

npm i global-agent
export GLOBAL_AGENT_HTTP_PROXY=http://mycorporateproxyhost:mycorporateproxyport/
npx -n "-r global-agent/bootstrap" sonarqube-scanner ...

(btw: above npx command is actually executed from a jenkins pipeline, this way I only have to amend the build job)