Bazel Integrations Versus Compilation Database

SonarQube Server / Community Build
1

Version: (Linux x86)

  • SonarQube Developer 9.0.1.46107
  • sonar-scanner 4.6.2.2472
  • build-wrapper 6.23
  • Bazel 4.2.1

Goal: I’m trying to setup SonarQube to analyze C++ code, with Bazel as the build system, in a CI context.

Attempted so far:

  • Followed “Building with Bazel” in the CFamily documentation. Successfully analyzed after a little elbow grease on the outdated flags
  • Generating a compilation database and scanning directly with that (no build wrapper). Successfully analyzed

I’m experimenting with different options to analyze some C++ code, but I’m having difficulty understanding the benefits of build_wrapper and some nuance of its Bazel integrations. I got both the Bazel integrations and a direct use of a compilation database to analyze the code, but they produce slightly different results. The Bazel integration’s extra step of a full build without sandboxing or caching leaves me wondering what its benefits are; that build can be extremely slow compared to quickly generating a compilation database. In a CI context, do I need to run build_wrapper each time? Does it produce higher-quality results that make the extra build time worth it?

Best,
Ryan

2

Hi @r_drav ,

you may want to give a read at this recent blog post https://blog.sonarsource.com/alternative-way-to-configure-c-and-cpp-analysis which explains differences between using build-wrapper and compilation database.

Let us know if you have remaining doubts after the reading.

1 Like
3

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.