Analyzation performance

SonarQube Server / Community Build
,
1

Must-share information (formatted with Markdown):

  • which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension)
  • how is SonarQube deployed: zip, Docker, Helm
  • what are you trying to achieve
  • what have you tried so far to achieve this

Do not share screenshots of logs – share the text itself (bonus points for being well-formatted)!
I have inherited an 10.0.0.68432 SQ instance and am trying to understand how it all goes together, but our biggest issue currently is the time it takes for our analyze step run, which is not between 60-90 minutes. Where is a good place to start looking at for performance gains, as I have to think something is not setup correctly. We are running self-hosted windows build agents as VMs

2

Hi,

The first thing you should do is upgrade to the current version. To be honest, my memory is pretty fuzzy, but I think there were some analysis performance improvements early in the cycle.

And if that doesn’t help, can you post your full analysis log?

The analysis / scanner log is what’s output from the analysis command. Hopefully, the log you provide - redacted as necessary - will include that command as well.

This guide will help you find them.

 
Thx,
Ann

3

I have asked about that, but I am not in charge of that env, so I am their mercy. I will sanitize our log and attach it as a zip file shortly.

4

It is a no go on our logs per infosec, but I am curious why SQ needs to have our sln file and projects between the begin (prepare) and end (analyze) steps in order for the analyze to happen? This causes our compile to jump from ~3 min to 20-30 min?
Thanks

5

Hi,

The rules are actually applied during the build, which is why it impacts your build duration. Per the docs:

The rules configured in your SonarQube Quality Profile are run during the build, and it is expected that analyzing with SonarQube can increase build duration from 4 to 8 times. The impact on duration will vary by project and by what rules are enabled; some rules are simple to execute and others take additional time to have the impact and precision expected of them.

 
HTH,
Ann

6

Thanks. Do you hear of other customers using SQ for PR builds in a CI platform with these long run times or is it used in other scenarios?

7

Hi,

Ehm… it’s hard to have this conversation with you when you’re still on 10.0.

If you were on a current version, it would make it a lot easier to dig into this with you or to flag this for more expert eyes. As it stands, there’s not much I can do.

 
Ann