Codeclimate + sonar java + lombok -> False positives

SonarQube Server / Community Build
1

I am using, codeclimate tool for code quality, and we are using sonar java as analyser.
I am seeing false positives, in the case of code quality check → java:S1068

The check: Unused “private” fields should be removed
Sonarjava is unable to recognise lombok dependencies, and I am getting all these warnings.

I did a little digging, and got to know, there was an update regarding this issue, but I am still seeing this issue.

2

Hey there.

We did some work on this with SONARJAVA-4933, but I have no idea what version CodeClimate is using. You’ll have to ask them.

3

We run SonarQube as a Docker container with the latest sonarqube:10.8-developer image (as of writing) and still get lots of FP for classes annotated with @Getter. The fields are 100% used through the Lombok-generated getters, but SQ still raises “Remove this unused private field”.

On a side note, how can you tell from a Jira which version of SonarQube includes it?

4

It’s a bit complicated, and typically I have to refer to the build.gradle of a tagged version to know what’s included.

If you’re still facing a FP, I suggest raising a new thread following this guide:

1 Like