Doubts in SonarQube static code analysis

SonarQube Server / Community Build Plugin Development
,
1
  1. I have a project with swift and obj-c, I want to analyse these source code using SonarQube do I need build wrapper for static code analysis?
  2. I have a project with C and C++, I want to analyse these source code using SonarQube do I need build wrapper for static code analysis?
2

Hi Vicky,

In both cases, you will need Build Wrapper and the SonarScanner CLI.

You’ll need to generate a compilation database (compile_commands.json) using the Build Wrapper and provide it via the sonar.cfamily.compile-commands parameter when running the SonarScanner CLI.

References,

Please note analysing C/C++/Objective C is supported in SonarQube Server and not in SonarQube Community.

HTH,
Aravind

3

I have a developer edition and I generated the report without build wrapper for my c, c++ code.

image
image2484×1302 188 KB
, but without using build wrapper how I got this ?

can you explain the differences with build wrapper and without

4

I am not an expert, but from what I understand, there are two analysis modes. One using a Compilation Database (via Build Wrapper) and another using AutoConfig. It looks like AutoConfig was triggered in your case.

SonarQube recommends choosing between AutoConfig and Compilation Database modes based on specific scenarios. You can find more details here,

-Aravind