C/C++ AutoConfig and Sonar features

Hello there

I used to be an active user of Sonar products in different companies. Now i changed completely field and I’m working in IoT .

One of the main pain point here are builds in C, as you can imagine a lot of information are required (compiler, flags, proper make file etc.) in oder to build correctly the project. This is quite a problem for a SAST tool, even for the more sophisticated once.

My question is: i stambled across the AutoConfig feature from Sonar but i can not understand wheter this would be supported also for complex C projects. Ergo: is it also capable of “auto configuring” the scan also for C? Or is some extra configuration required too?

Thank you very much for your time and help

Best

Matteo

Just give it a try :wink: As reported in another post I got a message “AutoConfig is discouraged for this project” for a mixed C#/C++23 solution with Visual Studio 2022 and then switched to use the build wrapper again.

1 Like

Hi @mdvzug and welcome to the community,

Yes, C is officially supported by AutoConfig. It is also possible to improve the heuristics employed by AutoConfig by tweaking these properties.

Best regards,
Michael

1 Like