Dependencies/libraries were not provided for analysis of SOURCE files

SonarQube Cloud
1

Dependencies/libraries were not provided for analysis of SOURCE files. The ‘sonar.java.libraries’ property is empty.

  • ALM used (GitHub, Bitbucket
  • CI system used (Bitbucket Cloud, Azure DevOps, Travis CI, Circle CI
    Jenkins
  • Scanner command used when applicable (private details masked)
 stage('Sonarcloud Analysis') {
      when { expression { true } }
      tools {
        jdk 'openjdk17'
        nodejs 'nodejs20'
        dotnetsdk 'dotnet8'
        }
        
      environment {
        SCANNER_HOME = tool 'RED SonarQube Scanner 4.0'
        BRANCH = 'preprod'
        NODEJS_HOME = tool 'nodejs20'
        DOTNET_HOME = tool 'dotnet8'
        JAVA_HOME = tool 'openjdk17'
      }
      steps {
      withEnv(["PATH+SCANNER=${SCANNER_HOME}:${DOTNET_HOME}:${JAVA_HOME}"]) {
      //withEnv(["PATH+SCANNER=${SCANNER_HOME}:${DOTNET_HOME:${NODEJS_HOME}:${JAVA_HOME}}"]) {
        withSonarQubeEnv(installationName: 'RED SonarCloud', credentialsId: 'sonar_cloud_token') {
            sh 'echo $DOTNET_HOME'
            sh '''
              $SCANNER_HOME/bin/sonar-scanner \
                -Dsonar.java.binaries=. -Dsonar.branch.name=$BRANCH \
                -Dsonar.projectKey=raq_test -Dsonar.sources=. \
                -Dsonar.organization=raq \
                -Dsonar.exclusions=dist/,.sonar/,.scannerwork/,node_modules/,.git/,nginx/,src/*/.spec.ts,src/*/.spec.tsx \
                -X
            '''
            
          }
         }
        }
      }
  • Languages of the repository
    Java
  • Only if the SonarCloud project is public, the URL
    I suspect the scanning is not done properly it is only scanning1.2 K lines of code although project is 30K lines of code
  • Error observed (wrap logs/code around with triple quotes ``` for proper formatting)
    just seeing this warning after analysis but i suspect analysis is not properly working

‘’‘Dependencies/libraries were not provided for analysis of SOURCE files. The ‘sonar.java.libraries’ property is empty.’‘’

image
image809×363 23.5 KB

  • Steps to reproduce
  • Potential workaround

Do not share screenshots of logs – share the text itself (bonus points for being well-formatted)!

2

Hi,

How are you building? If this is a Java project, you should be using the scanner that corresponds to your build method, either SonarScanner for Gradle, or SonarScanner for Maven. Those scanners read the locations of sources, &etc, out of your build environment so there’s no need to specify them manually.

On a side note, since you’re analyzing a Java project here, there shouldn’t be a need to specify the .NET SDK, although it shouldn’t hurt anything.

 
Ann

3

I am using this scanner

image
image1608×741 26.6 KB

4

Hi,

How do you compile your project?

 
Ann