DevOps Sonar Analysis stuck at Running symbolic analysis for 'JS'

[Amit_Kamble]

Hi @Karim_El_Ouerghemmi

So looks like it is the security analysis that is significantly slowing analysis. Are these rules recently added or what has changed in the last few weeks that has doubled the time?

I’ve disabled all rules along with few as mentioned above using a temp profile and analysis has come down to 5min for the whole project.

Also, saw this answer and suggests similar thing.

Sonar scanner has started to take too much time to run analysis

Hi @krreet, looking at the logs, I see the JsSecuritySensor took 1734 seconds for the 13 JS security-related rules (S5883, S5131, S5696, S5144, S3649, S5147, S6105, S6096, S2631, S5146, S2076, S5334, S2083). You can assume that the analysis for each of these rules takes roughly the same time, so that’s about 1734/13 = 133 seconds per rule. A good 2 minutes per rule is quite normal when you have 1500 UCFGs to analyze: Note that the analysis for these rules is a very deep and complex one, as oppos…