Are sonar tools versionned on public sources?

[rzr (Phil Coval)]

For some reason I prefer to download build wrapper from public source, but I would like to have it aligned to my local server instance, is it possible to download file from trusted source and avoid to mirror it elsewhere ?

Ideally a file like this for build wrapper would be appreciated:

sonar-scanner-version

For the record i am looking for this file:

3ab5a1373df7febee8d6e2d1263107906c5de9e2f7a41651373e3ebae3c17b94 tmp/opt/build-wrapper-linux-x86.zip

[aravindnss (Aravind S)]

Hi Phil,

Welcome to the community .

You can download the Build-Wrapper package from your SonarQube Server Instance by navigating to the URL below,
<Your SonarQube Server URL>/static/cpp/build-wrapper-linux-x86.zip

You can find more details in the documentation here - CFamily prerequisites | SonarQube Server Documentation

Thanks,
Aravind

[rzr (Phil Coval)]

This is what i like to avoid, because I want to use it on a public runner, the other option would be to pass the asset using a different workflow but if it can be fixed at the source it will help.

I have tested along this archive:

https://sonarcloud.io/static/cpp/build-wrapper-linux-x86.zip

sha256: 1b79910fb03e4287bab3c60dcd77dbb53b5a65a31ec39548bea0ee1f042f323a

But a warning is shown about a version mismatch.

So please consider provide a public stable versioned URL like the scanner.

Relate-to: New Github action for C++ Docker project - #5 by rzr

[Colin]

@rzr

This is what i like to avoid, because I want to use it on a public runner,

I’m not sure I understand. You are going to need to be able to access your SQ server to submit analysis, so what’s the problem with downloading the build wrapper from your SQ server?

[rzr (Phil Coval)]

Because I need to build in a docker container, as mentioned in related thread I managed to way to reuse bw action and put the file into the container:

New Github action for C++ Docker project

I am also curious about this too, I hacked something by doing the sonar tasks in a container i wish I could offload those long tasks to a separate workflow (copying .gc files is not enough, I guess same tools should be installed too and then in an other container this is a bit cumbersome ) BTW I had to use the bw action to download tool (to copy to container), but I wish i could pull it form container from a pinned version:

Well i think there is no better option for now, it works enough for me