Disable Taint Analysis

SonarQube Cloud
1

Hi,

We have our project in Github and we are building it using Jenkins + maven build. When we are running mvn sonar:sonar for sonar analysis, it is taking too much time and we have found that taint analysis is taking too much time from the total time. We have tried to find a way to disable taint analysis for our Java project and only option we have found is to disable rules.

Is there a better way of disabling taint analysis when we run mvn sonar:sonar sonar analysis?

Thanks,
Tushar

2

Hey there.

Disabling the rules in your Quality Profile is the supported way to disable taint analysis.

And, if you’re willing to share more details about your project (how much longer it takes with taint analysis rules enabled, as a starter), it’s feedback our team would be happy to work through!

3

Hi Colin,

Thanks for the reply.

How will come to know which rules I need to disable to disable taint analysis?

Taint analysis in our project takes around an hour and total time taken by sonar analysis is around 1 hour 34 mins.

Please let me know what other details you need.

Thank you :slight_smile:

4

Hi Tushar,

I got the same issue of long Taint Analysis for js.
After disabling several rules in my Quality Profile (e.g. S5147) the scan took less than 5 minutes but the next run after that took more than 1 hour again. :frowning:

Any idea Colin

Thanks.

5

Hey @montanoeuse

Are you using SonarQube or SonarCloud? If SonarQube, what version?

In any case, I would suggest raising a new thread with this info, as well as any information about your project or analysis logs you can provide.

1 Like
6

Thanks @Colin. I have raised a new thread below

Cheers.