Questions tagged [sonarcloud]

SonarCloud is the code quality cloud service provided by SonarSource.

The main features of SonarCloud are:

  • 16 languages: Java, JS, C#, C/C++, Objective-C, TypeScript, Python, ABAP, PLSQL, T-SQL and more.
  • Thousands of rules to track down hard-to-find bugs and quality issues thanks to powerful static code analyzers.
  • Cloud CI Integrations, with Travis, VSTS, AppVeyor and more.
  • Deep code analysis, to explore all source files, whether in branches or pull requests, to reach a green quality gate and promote the build.
  • Fast and Scalable
227 questions
0
votes
1 answer

sonarcloud dont check duplication javascript

I've been looking for hours how to disable sonarcloud checking on duplicate lines/blocks in my sonar-project.properties file, and I still can't make it, it's driving me crazy. I've tried sonar.cpd.exclusions=**/*.js sonar.cpd.exclusions=**/* But…
arnaudambro
  • 2,403
  • 3
  • 25
  • 51
0
votes
1 answer

Error Integration Bitbucket Pipeline and SonarCloud

ALM used Bitbucket Cloud CI system used Bitbucket Cloud Languages of the repository: Angular (Other (for JS, TS, Go, Python, PHP, …)) Error observed ERROR: Error during SonarScanner execution ERROR: Not authorized. Please check the property…
0
votes
1 answer

Why does SonarCloud show that everything is fine?

I'm working on a c# .net6 project and I'm trying to integrate SonarCloud using GitHub Actions. I have a build and sonarcloud workflow that looks like this: name: .NET on: push: branches: [ main ] pull_request: branches: [ main ] jobs: …
0
votes
0 answers

No coverage information will be saved because all LCOV files cannot be found in my javascript project using Github actions

I am using [sonar github action][1] for my code coverage, but it is coming as zero in my Github actions. This is my workflow: sonarcloud: runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 with: # Disabling…
0
votes
1 answer

Task 'sonarqube' not found in root project

I am trying to add sonarqube to my project and I followed the steps and added those lines to my build.gradle file plugins { id "org.sonarqube" version "3.3" } sonarqube { properties { property "sonar.projectKey", "myproject" property…
Frederic
  • 2,015
  • 4
  • 20
  • 37
0
votes
1 answer

Can a SAP Hybris project be built with JAVA 8 and Sonar scanned with JAVA 11 on Azure DevOps?

I am trying to build a SAP Hybris project in Azure DevOps using ant. Sonar cloud is being used for code quality analysis which in turn uses java 11 at least. Our project needs to be built using java 8. So, is there any possible ways to do this in…
0
votes
1 answer

Sonarcloud review for Github repository failed

I am using sonarcloud for https://github.com/fatihyildirim1o/aspnet-starter-kit but it is not working because of below error. enter image description here where am i doing wrong?
0
votes
1 answer

AWS Code-pipeline integration with sonarcloud

I am very new to Sonarcloud. Never used this before in production. Recently I have been given a task to integrate the snorcloud into AWS code pipeline. I am deploying a PHP application through code pipeline. I have followed some tutorials to achieve…
0
votes
2 answers

SonarCloud analysis task fails in Azure DevOps PR pipeline

I have a pipeline in Azure DevOps which is triggered by PR requests. There are three SonarCloud tasks in this pipeline - Prepare analysis on SonarCloud, (my project build step is here), Run Code Analysis and then Publish Quality Gate Result. When…
ataraxia
  • 995
  • 13
  • 31
0
votes
1 answer

Why sonar cloud does not tag as "Injection"?

Take a look at this code: var url = "https://mydatabase.documents.azure.com:443/"; var db = "my-db"; var key = "mykey"; var sqlQueryText = $"SELECT * FROM CelCoinData f WHERE f.id = '{data.UniversalId}' and f.uri = '{data.Uri}'"; var cliente = new…
Leonardo
  • 10,737
  • 10
  • 62
  • 155
0
votes
0 answers

SonarCloud does not show tests results

I have setup SonarCloud with my C# project, and it works fine, I can see Code Coverage and Unit Tests but these Unit Tests are only static number of my tests i.e. 13 when I entered into this I cannot see the tests structure instead No results. I…
Reddi
  • 677
  • 6
  • 19
0
votes
1 answer

How fetchdepth=1 matters to sonarcloud analysis

I am new to Devops and stuck with setting up fetchdepth in my Azure devops pipelines. One of the devops is suggesting to set it to minimum to 10 so that Sonarcloud does proper analysis else everything is squashed into 1 commit. can someone elaborate…
0
votes
1 answer

Error while setting up SonarCloud for a multimodule Maven project

Project is hosted on: GitHub - opencellsoft/core Sonar project https://sonarcloud.io/project/configuration?id=opencellsoft_core Both github actions and local maven where tested the used command locally : mvn verify…
Wassim D
  • 77
  • 1
  • 9
0
votes
1 answer

Analyse new\updated code only for dotnet projects with sonarcloud

We have setup pull request analysis for C# .Net code. It is observed old code(unmodified) is being considered for analysis which is not expected, this is blocking us from using quality gates. The new code condition is set based on the “number of…
Santhosh
  • 671
  • 12
  • 36
0
votes
1 answer

How to replace the get() function with computeIfAbsent() in a Map?

as a result of a Sonarcloud analysis, it was suggested that I should use the computeIfAbsent() method instead of get() on listeners which is defined as Map. Since I am unfamiliar with this method, would anyone know how to properly…
user11105917