Help me scanning .jsp, .class, and .jar files

SonarQube Server / Community Build Plugin Development
, ,
1

Hi everyone,

I am new to SonarQubeServer and currently using the Developer Edition( v 2025.5 ), which is deployed using a zip file and using an external DB PostgreSQL.

I have a few codebases on my local machine that I want to analyze using SonarQube. The files are a mix of .jsp, and .jar files, stored across different folders and subfolders.
Here’s the structure:

The main folder contains several .jsp files.

Some subfolders contain .jar files (for example, one subfolder has 5 .jar files).
I’m not sure how to run a SonarQube analysis on these kinds of files

2

Hey there.

.jsp files should be analyzed out of the box when using the SonarScanner CLI or other scanners, but you won’t be able to scan .jar files. SonarQube scans source code, not binaries.

1 Like