Add Rust language support

Just to mention, I’ve made a tool to convert a few of Rust tooling output into Sonar generic input with the project cargo-sonar.

Basically, you run rust tooling somewhere, then convert the output with cargo-sonar, then feed it to sonar-scanner.

I’ve been working with it for a few months on some projects already, and it’s already useful enough (mainly the clippy parser). It’s not perfect though, as there are at least 2 main problems with it:

  • I don’t have experience to categorize correctly an issue into the semantic used in Sonar (is it critical or not for example), so any scoring between A and E that might be given by the result of using cargo-sonar is likely incoherent with any other Sonar approved tool
  • some of the supported tools are frequently changing their API, which makes cargo-sonar works relatively well on an up-to-date version of all tools, but maybe not so much on older versions
2 Likes