Adding SonarCloud adds significant time and space - is there an option for delayed analysis

[Andrei_Epure]

hi @robsierra and welcome to this community!

@robsierra

puts the build over the 10 gb limit for a hosted agent.

do you mean RAM or disk?

@robsierra

I don’t know how your system works

I wrote a brief overview of how our .NET analysis works. Feel free to ask more questions if you want.

@robsierra

does the analysis need to be done right at that moment that the build is run?

The analysis is (mostly) done during the build because for .NET, our analyzers are Roslyn analyzers (.NET Compiler Platform). They are invoked by MSBuild during compilation. Our advanced vulnerability analysis is done separately, after the build (but most of the analysis is done during the build).

@robsierra

Aren’t the files uploaded to the endpoint anyway, and if so could there be an extra option or premium feature that allows the build to upload the files and the analysis to be performed at the endpoint so it doesn’t disrupt the builds as much?

We do have Automatic Analysis for some languages (check the list here), but not for .NET.

@robsierra

Building without SonarCloud takes about 15 minutes, but building with SonarCloud takes over an hour and a half

I suggest that we focus on this part, and see if there’s any improvement that you can make on your side, or if we can learn about specific performance bottle-necks that manifest on your code base.

To see which rules take the most time during your build, it would help to run the build in verbose mode.

First run the scanner begin command (to reproduce locally) - check the scanner for .net docs.

Then run the build in verbose mode with reportanalyzer set to true

dotnet build ... -v:d -p:reportanalyzer=true > build_logs.txt

And then

select-string -path "build_logs.txt" -pattern "NOTE: Elapsed time may be less than analyzer execution time because analyzers can run concurrently." -Context 1,100 > analyzer_times.txt

And share with us the analyzer_times.txt . If you don’t to share them publicly here, I can send you a private message.

Thanks,
Andrei