I am unable to scan the code for multiple modules using fastlane

rakeshkatakam · March 8, 2021, 9:04am

I am using Fastlane Action to scan my iOS project modules like Arch,Appcore,Uikit here it is scanning only arch modules but not appcore and uikit
I have tried below multiple ways by configured in sonar-project.properties file but no luck could you please anyone help on this ?

sonar.sources=Arch/Arch,AppCore/McDAppCore/McDAppCore,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/McDUIKit/
sonar.sources=.
sonar.modules=Arch/Arch/,AppCore/McDAppCore/McDAppCore/,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/McDUIKit

rakeshkatakam · March 8, 2021, 9:11am

Summary

This text will be hidden

ganncamp · March 8, 2021, 2:01pm

Hi,

Welcome to the community!

You posted two, nearly identical topics within minutes of each other. Please don’t do that. I’ve combined them.

And, there’s very little here to go on. Perhaps you can provide your analysis logs, starting from the analysis command?

Ann

rakeshkatakam · March 8, 2021, 2:25pm

Thanks Ann,
I have used the commands like fastlane codeAnalysis and sonar-scanner -X commands to scan the code. it was scan the code only one module instead multiple modules.
below are the three modules which i need scan it is scanning only Arch/Arch module.
used in sonar-project.properties file
sonar.sources=Arch/Arch,AppCore/McDAppCore/McDAppCore,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/McDUIKit
sonar.sources=.
so could you please help in scan the all modules ?

Thanks,
Rakesh

ganncamp · March 8, 2021, 2:27pm

Hi Rakesh,

Again, please share your analysis logs. (The output from when you ran the analysis command)

Ann

rakeshkatakam · March 8, 2021, 2:51pm

Mam, Due to some security reasons I am unable to share the sonar scan report please find the below logs which is getting success.

rakeshkatakam@rakeshs-MacBook-Pro CORE-0303 % fastlane codeAnalysis
[]
[19:23:08]: fastlane detected a Gemfile in the current directory
[19:23:08]: However, it seems like you didn’t use bundle exec
[19:23:08]: To launch fastlane faster, please use
[19:23:08]:
[19:23:08]: $ bundle exec fastlane codeAnalysis
[19:23:08]:
[19:23:08]: Get started using a Gemfile for fastlane Setup - fastlane docs
±-----------------------------------------------±--------±--------------------------------------+
| Used plugins |
±-----------------------------------------------±--------±--------------------------------------+
| Plugin | Version | Action |
±-----------------------------------------------±--------±--------------------------------------+
| fastlane-plugin-update_provisioning_profile_s | 1.3.1 | update_provisioning_profile_specifier |
| pecifier | | |
±-----------------------------------------------±--------±--------------------------------------+

[19:23:13]: Your Fastfile has had smart quotes sanitised. To avoid issues in the future, you should not use TextEdit for editing it. If you are not using TextEdit, you should turn off smart quotes in your editor of choice.
[19:23:13]: ----------------------------------------
[19:23:13]: — Step: Verifying fastlane version —
[19:23:13]: ----------------------------------------
[19:23:13]: Your fastlane version 2.176.0 matches the minimum requirement of 2.32.1
[19:23:13]: ------------------------------
[19:23:13]: — Step: default_platform —
[19:23:13]: ------------------------------
[19:23:13]: Driving the lane ‘ios codeAnalysis’
[19:23:13]: -------------------
[19:23:13]: — Step: sonar —
[19:23:13]: -------------------
[19:24:40]: ▸ WARN: * fastlane/report.xml

[19:24:40]: ▸ WARN: This may lead to missing/broken features in SonarQube

[19:24:40]: ▸ INFO: CPD Executor 52 files had no CPD blocks

[19:24:40]: ▸ INFO: CPD Executor Calculating CPD for 469 files

[19:24:41]: ▸ INFO: CPD Executor CPD calculation finished (done) | time=110ms

[19:24:41]: ▸ INFO: Load New Code definition

[19:24:43]: ▸ INFO: Load New Code definition (done) | time=2373ms

[19:24:43]: ▸ INFO: Analysis report generated in 2661ms, dir size=5 MB

[19:24:45]: ▸ INFO: Analysis report compressed in 1298ms, zip size=1 MB

[19:25:20]: ▸ INFO: Analysis report uploaded in 35069ms
[19:25:20]: ▸ INFO: Analysis total time: 1:56.662 s
[19:25:20]: ▸ INFO: ------------------------------------------------------------------------
[19:25:20]: ▸ INFO: EXECUTION SUCCESS
[19:25:20]: ▸ INFO: ------------------------------------------------------------------------
[19:25:20]: ▸ INFO: Total time: 2:06.693s
[19:25:20]: ▸ INFO: Final Memory: 234M/1604M
[19:25:20]: ▸ INFO: ------------------------------------------------------------------------

±-----±---------------------------±------------+
| fastlane summary |
±-----±---------------------------±------------+
| Step | Action | Time (in s) |
±-----±---------------------------±------------+
| 1 | Verifying fastlane version | 0 |
| 2 | default_platform | 0 |
| 3 | sonar | 127 |
±-----±---------------------------±------------+

ganncamp · March 8, 2021, 7:58pm

Hi,

Is this the entire log, or have large chunks been removed?

Ann

rakeshkatakam · March 9, 2021, 6:31am

Hi Ann, Please find the attached complete large chunks and also kindly check the below sonar property file FastlaneLogs.txt (21.6 KB)

sonar.exclusions=AppCore/McDAppCore/Frameworks/submodule_McDConnect/ios_SDK_4.6_iOS/**/*,AppCore/McDAppCore/Frameworks/submodule_McDConnect/McDConnect/McDConnect/isobar/**/*,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/**/*.h,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/**/*.m
#sonar.sources=Arch/Arch,AppCore/McDAppCore/McDAppCore,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/McDUIKit/
sonar.sources=.
sonar.cfamily.build-wrapper-output.bypass=true
sonar.coverageReportPaths=slather-report-sonar/sonarqube-generic-coverage.xml

Thanks,
Rakesh

Edited by Ann to include the text of the uploaded log:

rakeshkatakam@rakeshs-MacBook-Pro CORE-0303 % fastlane codeAnalysis
[✔] 🚀 
[11:46:45]: fastlane detected a Gemfile in the current directory
[11:46:45]: However, it seems like you didn't use `bundle exec`
[11:46:45]: To launch fastlane faster, please use
[11:46:45]: 
[11:46:45]: $ bundle exec fastlane codeAnalysis
[11:46:45]: 
[11:46:45]: Get started using a Gemfile for fastlane https://docs.fastlane.tools/getting-started/ios/setup/#use-a-gemfile
+-------------------------------------------------------+---------+---------------------------------------+
|                                              Used plugins                                               |
+-------------------------------------------------------+---------+---------------------------------------+
| Plugin                                                | Version | Action                                |
+-------------------------------------------------------+---------+---------------------------------------+
| fastlane-plugin-update_provisioning_profile_specifier | 1.3.1   | update_provisioning_profile_specifier |
+-------------------------------------------------------+---------+---------------------------------------+

[11:46:49]: Your Fastfile has had smart quotes sanitised. To avoid issues in the future, you should not use TextEdit for editing it. If you are not using TextEdit, you should turn off smart quotes in your editor of choice.
[11:46:49]: ----------------------------------------
[11:46:49]: --- Step: Verifying fastlane version ---
[11:46:49]: ----------------------------------------
[11:46:49]: Your fastlane version 2.176.0 matches the minimum requirement of 2.32.1  ✅
[11:46:49]: ------------------------------
[11:46:49]: --- Step: default_platform ---
[11:46:49]: ------------------------------
[11:46:49]: Driving the lane 'ios codeAnalysis' 🚀
[11:46:49]: -------------------
[11:46:49]: --- Step: sonar ---
[11:46:49]: -------------------
[11:46:50]: ▸ INFO: Scanner configuration file: /usr/local/Cellar/sonar-scanner/4.5.0.2216/libexec/conf/sonar-scanner.properties
[11:46:50]: ▸ INFO: Project root configuration file: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/sonar-project.properties
[11:46:50]: ▸ INFO: SonarScanner 4.5.0.2216
[11:46:50]: ▸ INFO: Java 1.8.0_271 Oracle Corporation (64-bit)
[11:46:50]: ▸ INFO: Mac OS X 10.15.7 x86_64
[11:46:50]: ▸ INFO: User cache: /Users/rakeshkatakam/.sonar/cache
[11:46:55]: ▸ INFO: Scanner configuration file: /usr/local/Cellar/sonar-scanner/4.5.0.2216/libexec/conf/sonar-scanner.properties
[11:46:55]: ▸ INFO: Project root configuration file: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/sonar-project.properties
[11:46:55]: ▸ INFO: Analyzing on SonarQube server 8.5.1
[11:46:55]: ▸ INFO: Default locale: "en_IN", source code encoding: "UTF-8"
[11:46:55]: ▸ WARN: SonarScanner will require Java 11 to run starting in SonarQube 8.x
[11:46:55]: ▸ INFO: Load global settings
[11:47:00]: ▸ INFO: Load global settings (done) | time=4766ms
[11:47:00]: ▸ INFO: Server id: E06ABFD2-AWX32SEMXPTjRbcQ4v5_
[11:47:00]: ▸ INFO: User cache: /Users/rakeshkatakam/.sonar/cache
[11:47:00]: ▸ INFO: Load/download plugins
[11:47:00]: ▸ INFO: Load plugins index
[11:47:01]: ▸ INFO: Load plugins index (done) | time=980ms
[11:47:01]: ▸ INFO: Load/download plugins (done) | time=1154ms
[11:47:01]: ▸ INFO: Loaded core extensions: developer-scanner
[11:47:01]: ▸ INFO: JavaScript/TypeScript frontend is enabled
[11:47:02]: ▸ INFO: Process project properties
[11:47:02]: ▸ INFO: Process project properties (done) | time=7ms
[11:47:02]: ▸ INFO: Execute project builders
[11:47:02]: ▸ INFO: Execute project builders (done) | time=1ms
[11:47:02]: ▸ INFO: Project key: GMA_CORE_DROP2_iOS
[11:47:02]: ▸ INFO: Base dir: /Users/rakeshkatakam/Downloads/workspace/CORE-0303
[11:47:02]: ▸ INFO: Working dir: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork
[11:47:03]: ▸ INFO: Load project settings for component key: 'GMA_CORE_DROP2_iOS'
[11:47:04]: ▸ INFO: Load project settings for component key: 'GMA_CORE_DROP2_iOS' (done) | time=686ms
[11:47:04]: ▸ INFO: Load project branches
[11:47:04]: ▸ INFO: Load project branches (done) | time=704ms
[11:47:04]: ▸ INFO: Load project pull requests
[11:47:05]: ▸ INFO: Load project pull requests (done) | time=751ms
[11:47:05]: ▸ INFO: Load branch configuration
[11:47:05]: ▸ INFO: Found manual configuration of branch/PR analysis. Skipping automatic configuration.
[11:47:05]: ▸ INFO: Load branch configuration (done) | time=2ms
[11:47:05]: ▸ INFO: Load quality profiles
[11:47:06]: ▸ INFO: Load quality profiles (done) | time=794ms
[11:47:06]: ▸ INFO: Load active rules
[11:48:04]: ▸ INFO: Load active rules (done) | time=57591ms
[11:48:04]: ▸ INFO: Branch name: trunk
[11:48:04]: ▸ INFO: Indexing files...
[11:48:04]: ▸ INFO: Project configuration:
[11:48:04]: ▸ INFO:   Excluded sources: **/stores/**, AppCore/McDAppCore/Frameworks/submodule_McDConnect/ios_SDK_4.6_iOS/**/*, AppCore/McDAppCore/Frameworks/submodule_McDConnect/McDConnect/McDConnect/isobar/**/*, AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/**/*.h, AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/**/*.m
[11:48:04]: ▸ INFO:   Excluded sources for coverage: **/stores/**
[11:48:07]: ▸ INFO: 2154 files indexed
[11:48:07]: ▸ INFO: 23 files ignored because of inclusion/exclusion patterns
[11:48:07]: ▸ INFO: 10667 files ignored because of scm ignore settings
[11:48:07]: ▸ INFO: Quality profile for py: Sonar way
[11:48:07]: ▸ INFO: Quality profile for ruby: Sonar way
[11:48:07]: ▸ INFO: Quality profile for swift: MCD GMA Swift Sonar Profile
[11:48:07]: ▸ INFO: Quality profile for web: Sonar way
[11:48:07]: ▸ INFO: Quality profile for xml: Sonar way
[11:48:07]: ▸ INFO: ------------- Run sensors on module GMA_CORE_DROP2_iOS
[11:48:08]: ▸ INFO: JavaScript/TypeScript frontend is enabled
[11:48:08]: ▸ INFO: Load metrics repository
[11:48:09]: ▸ INFO: Load metrics repository (done) | time=1305ms
[11:48:11]: ▸ INFO: Sensor CSS Rules [cssfamily]
[11:48:17]: ▸ INFO: 1 source files to be analyzed
[11:48:17]: ▸ INFO: Load project repositories
[11:48:23]: ▸ INFO: Load project repositories (done) | time=5453ms
[11:48:23]: ▸ INFO: 1/1 source files have been analyzed
[11:48:23]: ▸ INFO: Sensor CSS Rules [cssfamily] (done) | time=11809ms
[11:48:23]: ▸ INFO: Sensor C# Properties [csharp]
[11:48:23]: ▸ INFO: Sensor C# Properties [csharp] (done) | time=0ms
[11:48:23]: ▸ INFO: Sensor JavaXmlSensor [java]
[11:48:23]: ▸ INFO: 1 source files to be analyzed
[11:48:23]: ▸ INFO: Sensor JavaXmlSensor [java] (done) | time=200ms
[11:48:23]: ▸ INFO: 1/1 source files have been analyzed
[11:48:23]: ▸ INFO: Sensor HTML [web]
[11:48:23]: ▸ INFO: Sensor HTML [web] (done) | time=179ms
[11:48:23]: ▸ INFO: Sensor XML Sensor [xml]
[11:48:23]: ▸ INFO: 1 source files to be analyzed
[11:48:23]: ▸ INFO: Sensor XML Sensor [xml] (done) | time=119ms
[11:48:23]: ▸ INFO: 1/1 source files have been analyzed
[11:48:23]: ▸ INFO: Sensor VB.NET Properties [vbnet]
[11:48:23]: ▸ INFO: Sensor VB.NET Properties [vbnet] (done) | time=1ms
[11:48:23]: ▸ INFO: Sensor SonarSwift [swift]
[11:48:23]: ▸ INFO: 519 source files to be analyzed
[11:48:26]: ▸ ERROR: String is not parsed (file Arch/ArchTests/Deals/DealsDataSourceConnectorTests.swift, line 233)
[11:48:26]: ▸ 223:                XCHttpStub.request(withPathRegex: "(.*)\\/customer/account/tplink", withResponseFile: "tpLinkResponse.mock")
[11:48:26]: ▸ 224:         let xpectation = expectation(description: "Results expected")
[11:48:26]: ▸ 225:         dealsDataSourceConnector?.offerManager = DealsDataSourceConnectorStub()
[11:48:26]: ▸ 226:         dealsDataSourceConnector?.getOffers(forStoreIds: [28636],
[11:48:26]: ▸ 227:                                                distance: nil,
[11:48:26]: ▸ 228:                                              offerTypes: nil,
[11:48:26]: ▸ 229:                                       storeUniqueIdType: "NSN",
[11:48:26]: ▸ 230:                                          groupAndSorted: nil,
[11:48:26]: ▸ 231:                                         invalidateCache: nil,
[11:48:26]: ▸ 232:                                              fetchLimit: nil,
[11:48:26]: ▸ 233:                                       completionHandler: { (offers, nil) in
[11:48:26]: ▸ ^
[11:48:26]: ▸ 234:                                                 XCTAssertNotNil(offers)
[11:48:26]: ▸ 235:                                                 xpectation.fulfill()
[11:48:26]: ▸ 236:         })
[11:48:26]: ▸ 237:         waitForExpectations(timeout: 10, handler: nil)
[11:48:26]: ▸ 238:     }
[11:48:26]: ▸ 239:
[11:48:26]: ▸ 240:     /// testcase with offsetparams
[11:48:26]: ▸ 241:     func testGetOffersWithParams() {
[11:48:26]: ▸ 242:         let xpectation = expectation(description: "Results expected")
[11:48:26]: ▸ 243:         dealsDataSourceConnector?.offerManager = DealsDataSourceConnectorStub()
[11:48:27]: ▸ ERROR: String is not parsed (file Arch/ArchTests/OrderTestCase/CheckInHelperTest.swift, line 30)
[11:48:27]: ▸ 20:
[11:48:27]: ▸ 21:     override func setUp() {
[11:48:27]: ▸ 22:         super.setUp()
[11:48:27]: ▸ 23:         AppconfigTestManager.sharedManger.addConfigFiles()
[11:48:27]: ▸ 24:         checkInHelper = CheckInHelper()
[11:48:27]: ▸ 25:     }
[11:48:27]: ▸ 26:
[11:48:27]: ▸ 27:     //Order expired for success case
[11:48:27]: ▸ 28:     func testIsOrderExpired(){
[11:48:27]: ▸ 29:         if let order = JsonToModelClass().getOrderModel(){
[11:48:27]: ▸ 30:             checkInHelper?.isOrderExpired(for: order, completion: { (order, nil, false) in
[11:48:27]: ▸ ^
[11:48:27]: ▸ 31:                 XCTAssertNotNil(order)
[11:48:27]: ▸ 32:             })
[11:48:27]: ▸ 33:         }
[11:48:27]: ▸ 34:     }
[11:48:27]: ▸ 35:
[11:48:27]: ▸ 36:     //Order expired with creation date for success case
[11:48:27]: ▸ 37:     func testIsOrderExpiredWithCreationDate(){
[11:48:27]: ▸ 38:         if let order = JsonToModelClass().getOrderModel(){
[11:48:27]: ▸ 39:             let currentDate = Date()
[11:48:27]: ▸ 40:             var dateComponents = DateComponents()
[11:48:28]: ▸ ERROR: String is not parsed (file Arch/ArchTests/OrderTestCase/RestaurantMenuDataSourceTests/RestaurantCatalogDataSourceConnectorTest.swift, line 330)
[11:48:28]: ▸ 320:         AppconfigTestManager.sharedManger.addConfigFiles()
[11:48:28]: ▸ 321:         restaurantCatalogDataSourceConnector = RestaurantCatalogDataSourceConnector()
[11:48:28]: ▸ 322:     }
[11:48:28]: ▸ 323:
[11:48:28]: ▸ 324:     //Search products for success case
[11:48:28]: ▸ 325:     func testSearchProductsSuccess() {
[11:48:28]: ▸ 326:         let searchFilteredData =  McDSearchFilterData.init(title: "product_filter_dollar_3_or_less", value: "$3orless", filter_Value: 3, filter_Type: 1, iconImageName: "", isActive: true, removable: true)
[11:48:28]: ▸ 327:         restaurantCatalogDataSourceConnector?.orderingCatalogManager = RestaurantCatalogDataSourceConnectorStub()
[11:48:28]: ▸ 328:         (restaurantCatalogDataSourceConnector?.restaurantMenuDataSourceConnector as? RestaurantMenuDataSourceConnector)?.orderingManager = RestaurantStoreManagerDataSourceConnectorStub()
[11:48:28]: ▸ 329:         (restaurantCatalogDataSourceConnector?.restaurantDataSourceConnector as? RestaurantDataSourceConnector)?.restaurantManager = RestaurantManagerStub()
[11:48:28]: ▸ 330:         restaurantCatalogDataSourceConnector?.searchProducts(forKey: "Coke", podType: .coldKiosk, withFilters: [searchFilteredData], completionHandler: { (products, nil) in
[11:48:28]: ▸ ^
[11:48:28]: ▸ 331:             XCTAssertNotNil(products)
[11:48:28]: ▸ 332:         })
[11:48:28]: ▸ 333:     }
[11:48:28]: ▸ 334:
[11:48:28]: ▸ 335:     //Search products for failure case
[11:48:28]: ▸ 336:     func testSearchProductsFail() {
[11:48:28]: ▸ 337:         let searchFilteredData =  McDSearchFilterData.init(title: "product_filter_dollar_3_or_less", value: "$3orless", filter_Value: 3, filter_Type: 1, iconImageName: "", isActive: true, removable: true)
[11:48:28]: ▸ 338:         restaurantCatalogDataSourceConnector?.orderingCatalogManager = nil
[11:48:28]: ▸ 339:         (restaurantCatalogDataSourceConnector?.restaurantMenuDataSourceConnector as? RestaurantMenuDataSourceConnector)?.orderingManager = nil
[11:48:28]: ▸ 340:         (restaurantCatalogDataSourceConnector?.restaurantDataSourceConnector as? RestaurantDataSourceConnector)?.restaurantManager = nil
[11:48:32]: ▸ INFO: 519/519 source files have been analyzed
[11:48:32]: ▸ INFO: Sensor SonarSwift [swift] (done) | time=8828ms
[11:48:32]: ▸ INFO: Sensor Python Sensor [python]
[11:48:32]: ▸ INFO: Starting global symbols computation
[11:48:32]: ▸ INFO: 2 source files to be analyzed
[11:48:35]: ▸ INFO: 2/2 source files have been analyzed
[11:48:35]: ▸ INFO: Starting rules execution
[11:48:35]: ▸ INFO: 2 source files to be analyzed
[11:48:35]: ▸ INFO: Sensor Python Sensor [python] (done) | time=3323ms
[11:48:35]: ▸ INFO: Sensor Cobertura Sensor for Python coverage [python]
[11:48:35]: ▸ INFO: 2/2 source files have been analyzed
[11:48:36]: ▸ INFO: Sensor Cobertura Sensor for Python coverage [python] (done) | time=1052ms
[11:48:36]: ▸ INFO: Sensor PythonXUnitSensor [python]
[11:48:37]: ▸ INFO: Sensor PythonXUnitSensor [python] (done) | time=447ms
[11:48:37]: ▸ INFO: Sensor JaCoCo XML Report Importer [jacoco]
[11:48:37]: ▸ INFO: 'sonar.coverage.jacoco.xmlReportPaths' is not defined. Using default locations: target/site/jacoco/jacoco.xml,target/site/jacoco-it/jacoco.xml,build/reports/jacoco/test/jacocoTestReport.xml
[11:48:37]: ▸ INFO: No report imported, no coverage information will be imported by JaCoCo XML Report Importer
[11:48:37]: ▸ INFO: Sensor JaCoCo XML Report Importer [jacoco] (done) | time=4ms
[11:48:37]: ▸ INFO: Sensor Ruby Sensor [ruby]
[11:48:37]: ▸ INFO: 2 source files to be analyzed
[11:48:40]: ▸ INFO: 2/2 source files have been analyzed
[11:48:40]: ▸ INFO: Sensor Ruby Sensor [ruby] (done) | time=3100ms
[11:48:40]: ▸ INFO: Sensor SimpleCov Sensor for Ruby coverage [ruby]
[11:48:40]: ▸ INFO: Sensor SimpleCov Sensor for Ruby coverage [ruby] (done) | time=1ms
[11:48:40]: ▸ INFO: Sensor ThymeLeaf template sensor [securityjavafrontend]
[11:48:40]: ▸ INFO: Sensor ThymeLeaf template sensor [securityjavafrontend] (done) | time=3ms
[11:48:40]: ▸ INFO: Sensor Python HTML templates processing [securitypythonfrontend]
[11:48:40]: ▸ INFO: Found no 'settings.py' files in the project. We will consider 'autoescape' project option enabled.
[11:48:40]: ▸ INFO: Sensor Python HTML templates processing [securitypythonfrontend] (done) | time=17ms
[11:48:40]: ▸ INFO: Sensor JavaSecuritySensor [security]
[11:48:40]: ▸ INFO: Reading type hierarchy from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork/ucfg2/java
[11:48:40]: ▸ INFO: Read 0 type definitions
[11:48:40]: ▸ INFO: Reading UCFGs from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork/ucfg2/java
[11:48:40]: ▸ INFO: No UCFGs have been included for analysis.
[11:48:40]: ▸ INFO: Sensor JavaSecuritySensor [security] (done) | time=3ms
[11:48:40]: ▸ INFO: Sensor CSharpSecuritySensor [security]
[11:48:40]: ▸ INFO: Reading type hierarchy from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/ucfg_cs2
[11:48:40]: ▸ INFO: Read 0 type definitions
[11:48:40]: ▸ INFO: Reading UCFGs from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/ucfg_cs2
[11:48:40]: ▸ INFO: No UCFGs have been included for analysis.
[11:48:40]: ▸ INFO: Sensor CSharpSecuritySensor [security] (done) | time=0ms
[11:48:40]: ▸ INFO: Sensor PhpSecuritySensor [security]
[11:48:40]: ▸ INFO: Reading type hierarchy from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork/ucfg2/php
[11:48:40]: ▸ INFO: Read 0 type definitions
[11:48:40]: ▸ INFO: Reading UCFGs from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork/ucfg2/php
[11:48:40]: ▸ INFO: No UCFGs have been included for analysis.
[11:48:40]: ▸ INFO: Sensor PhpSecuritySensor [security] (done) | time=1ms
[11:48:40]: ▸ INFO: Sensor PythonSecuritySensor [security]
[11:48:40]: ▸ INFO: Reading type hierarchy from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork/ucfg2/python
[11:48:40]: ▸ INFO: Read 460 type definitions
[11:48:40]: ▸ INFO: Reading UCFGs from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork/ucfg2/python
[11:48:40]: ▸ INFO: 11:48:40.826 Building Type propagation graph
[11:48:40]: ▸ INFO: 11:48:40.842 Running Tarjan on 4760 nodes
[11:48:40]: ▸ INFO: 11:48:40.848 Tarjan found 4760 components
[11:48:40]: ▸ INFO: 11:48:40.859 Variable type analysis: done
[11:48:40]: ▸ INFO: 11:48:40.86 Building Type propagation graph
[11:48:40]: ▸ INFO: 11:48:40.871 Running Tarjan on 4730 nodes
[11:48:40]: ▸ INFO: 11:48:40.874 Tarjan found 4730 components
[11:48:40]: ▸ INFO: 11:48:40.882 Variable type analysis: done
[11:48:40]: ▸ INFO: Analyzing 2043 ucfgs to detect vulnerabilities.
[11:48:41]: ▸ INFO: All rules entrypoints : 0 Retained UCFGs : 0
[11:48:41]: ▸ INFO: rule: S5334, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S5334 done
[11:48:41]: ▸ INFO: rule: S5135, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S5135 done
[11:48:41]: ▸ INFO: rule: S3649, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S3649 done
[11:48:41]: ▸ INFO: rule: S5146, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S5146 done
[11:48:41]: ▸ INFO: rule: S2083, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S2083 done
[11:48:41]: ▸ INFO: rule: S2091, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S2091 done
[11:48:41]: ▸ INFO: rule: S2078, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S2078 done
[11:48:41]: ▸ INFO: rule: S5145, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S5145 done
[11:48:41]: ▸ INFO: rule: S5167, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S5167 done
[11:48:41]: ▸ INFO: rule: S5144, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S5144 done
[11:48:41]: ▸ INFO: rule: S2076, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S2076 done
[11:48:41]: ▸ INFO: rule: S5131, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S5131 done
[11:48:41]: ▸ INFO: rule: S2631, entrypoints: 0
[11:48:41]: ▸ INFO: rule: S2631 done
[11:48:41]: ▸ INFO: Sensor PythonSecuritySensor [security] (done) | time=479ms
[11:48:41]: ▸ INFO: Sensor JsSecuritySensor [security]
[11:48:41]: ▸ INFO: Reading type hierarchy from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork/ucfg2/js
[11:48:41]: ▸ INFO: Read 0 type definitions
[11:48:41]: ▸ INFO: Reading UCFGs from: /Users/rakeshkatakam/Downloads/workspace/CORE-0303/.scannerwork/ucfg2/js
[11:48:41]: ▸ INFO: No UCFGs have been included for analysis.
[11:48:41]: ▸ INFO: Sensor JsSecuritySensor [security] (done) | time=0ms
[11:48:41]: ▸ INFO: ------------- Run sensors on project
[11:48:41]: ▸ INFO: Sensor Zero Coverage Sensor
[11:48:41]: ▸ INFO: Sensor Zero Coverage Sensor (done) | time=127ms
[11:48:41]: ▸ INFO: SCM Publisher SCM provider for this project is: git
[11:48:41]: ▸ INFO: SCM Publisher 1 source file to be analyzed
[11:48:41]: ▸ INFO: SCM Publisher 0/1 source files have been analyzed (done) | time=220ms
[11:48:41]: ▸ WARN: Missing blame information for the following files:
[11:48:41]: ▸ WARN:   * fastlane/report.xml
[11:48:41]: ▸ WARN: This may lead to missing/broken features in SonarQube
[11:48:41]: ▸ INFO: CPD Executor 52 files had no CPD blocks
[11:48:41]: ▸ INFO: CPD Executor Calculating CPD for 469 files
[11:48:41]: ▸ INFO: CPD Executor CPD calculation finished (done) | time=147ms
[11:48:41]: ▸ INFO: Load New Code definition
[11:48:43]: ▸ INFO: Load New Code definition (done) | time=1327ms
[11:48:43]: ▸ INFO: Analysis report generated in 1578ms, dir size=5 MB
[11:48:44]: ▸ INFO: Analysis report compressed in 1274ms, zip size=1 MB
[11:48:56]: ▸ INFO: Analysis report uploaded in 12142ms
[11:48:56]: ▸ INFO: ANALYSIS SUCCESSFUL, you can browse https://sonarqube.sharedtools
[11:48:56]: ▸ INFO: Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
[11:48:56]: ▸ INFO: More about the report processing at https://sonarqub
[11:48:57]: ▸ INFO: Analysis total time: 1:55.495 s
[11:48:57]: ▸ INFO: ------------------------------------------------------------------------
[11:48:57]: ▸ INFO: EXECUTION SUCCESS
[11:48:57]: ▸ INFO: ------------------------------------------------------------------------
[11:48:57]: ▸ INFO: Total time: 2:06.710s
[11:48:57]: ▸ INFO: Final Memory: 233M/1597M
[11:48:57]: ▸ INFO: ------------------------------------------------------------------------

+------+----------------------------+-------------+
|                fastlane summary                 |
+------+----------------------------+-------------+
| Step | Action                     | Time (in s) |
+------+----------------------------+-------------+
| 1    | Verifying fastlane version | 0           |
| 2    | default_platform           | 0           |
| 3    | sonar                      | 127         |
+------+----------------------------+-------------+

[11:48:57]: fastlane.tools finished successfully 🎉

#######################################################################
# fastlane 2.177.0 is available. You are on 2.176.0.
# You should use the latest version.
# Please update using `fastlane update_fastlane`.
#######################################################################
# Run `gem cleanup` from time to time to speed up fastlane
#######################################################################
rakeshkatakam@rakeshs-MacBook-Pro CORE-0303 %

ganncamp · March 9, 2021, 6:53pm

Hi Rakesh,

The initial complaint was that

And it seems that you’re explicitly excluding at least part of AppCore:

rakeshkatakam:

sonar.exclusions=AppCore/McDAppCore/Frameworks/submodule_McDConnect/ios_SDK_4.6_iOS/**/*,AppCore/McDAppCore/Frameworks/submodule_McDConnect/McDConnect/McDConnect/isobar/**/*,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/**/*.h,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/**/*.m

I suggest 2 things as next steps:

simplify your analysis properties. The idea being: let’s get everything analyzed and then you can start narrowing from there. So:

rakeshkatakam:

#sonar.exclusions=AppCore/McDAppCore/Frameworks/submodule_McDConnect/ios_SDK_4.6_iOS/**/*,AppCore/McDAppCore/Frameworks/submodule_McDConnect/McDConnect/McDConnect/isobar/**/*,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/**/*.h,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/**/*.m
#sonar.sources=Arch/Arch,AppCore/McDAppCore/McDAppCore,AppCore/McDAppCore/Frameworks/submodule_McDUIKit/McDUIKit/McDUIKit/
sonar.sources=.
sonar.cfamily.build-wrapper-output.bypass=true
#sonar.coverageReportPaths=slather-report-sonar/sonarqube-generic-coverage.xml

Add -Dsonar.scanner.dumpToFile=[file name] to your analysis command line so you can see what property values analysis is actually run with.

Ann

rakeshkatakam · March 10, 2021, 3:12pm

Hi Ann, I have followed as per your suggestions I commented the exclusions and ran this command sonar-sccaner -Dsonar.scanner.dumpToFile=Myfile so here the file was generated which the file contains below code but the same thing that only one module is scanning could you pls suggest more?

## Generated by a SonarScanner
#Wed Mar 10 20:25:22 IST 2021
awt.toolkit=sun.lwawt.macosx.LWCToolkit
file.encoding=UTF-8
file.encoding.pkg=sun.io
file.separator=/
gopherProxySet=false
java.awt.graphicsenv=sun.awt.CGraphicsEnvironment
java.awt.headless=true
java.awt.printerjob=sun.lwawt.macosx.CPrinterJob
java.class.path=/usr/local/Cellar/sonar-scanner/4.5.0.2216/libexec/lib/sonar-scanner-cli-4.5.0.2216.jar
java.class.version=52.0
java.endorsed.dirs=/Library/Java/JavaVirtualMachines/jdk1.8.0_271.jdk/Contents/Home/jre/lib/endorsed
java.ext.dirs=/Users/rakeshkatakam/Library/Java/Extensions\:/Library/Java/JavaVirtualMachines/jdk1.8.0_271.jdk/Contents/Home/jre/lib/ext\:/Library/Java/Extensions\:/Network/Library/Java/Extensions\:/System/Library/Java/Extensions\:/usr/lib/java
java.home=/Library/Java/JavaVirtualMachines/jdk1.8.0_271.jdk/Contents/Home/jre
java.io.tmpdir=/var/folders/nx/0065_5r12fs6s0tty5hn_lhc0000gn/T/
java.library.path=/Users/rakeshkatakam/Library/Java/Extensions\:/Library/Java/Extensions\:/Network/Library/Java/Extensions\:/System/Library/Java/Extensions\:/usr/lib/java\:.
java.runtime.name=Java(TM) SE Runtime Environment
java.runtime.version=1.8.0_271-b09
java.specification.name=Java Platform API Specification
java.specification.vendor=Oracle Corporation
java.specification.version=1.8
java.vendor=Oracle Corporation
java.vendor.url=http\://java.oracle.com/
java.vendor.url.bug=http\://bugreport.sun.com/bugreport/
java.version=1.8.0_271
java.vm.info=mixed mode
java.vm.name=Java HotSpot(TM) 64-Bit Server VM
java.vm.specification.name=Java Virtual Machine Specification
java.vm.specification.vendor=Oracle Corporation
java.vm.specification.version=1.8
java.vm.vendor=Oracle Corporation
java.vm.version=25.271-b09
line.separator=\n
os.arch=x86_64
os.name=Mac OS X
os.version=10.15.7
path.separator=\:
scanner.home=/usr/local/Cellar/sonar-scanner/4.5.0.2216/libexec
sonar.c.file.suffixes=-
sonar.cfamily.build-wrapper-output.bypass=true
sonar.cpp.file.suffixes=-
sonar.host.url=http\://sonarqube.sharedtools.vet-tools.digitalecp.mcd.com
sonar.language=swift
sonar.login=cf619840b97474e6984c5ad1975bad1793afc6be
sonar.objc.file.suffixes=-
sonar.projectBaseDir=/Users/rakeshkatakam/Documents/Myworkspace/CORE-0223
sonar.projectKey=GMA_CORE_DROP2_iOS
sonar.scanner.app=ScannerCLI
sonar.scanner.appVersion=4.5.0.2216
sonar.scanner.dumpToFile=Myfile
sonar.sourceEncoding=UTF-8
sonar.sources=.

Thanks
Rakesh

ganncamp · March 10, 2021, 7:22pm

Hi Rakesh,

I see some interesting things in your properties:

First, there is an unredacted auth token, which you have already invalidated, right?

Second, these interesting properties

From these, I take it that your project includes C, C++ and/or Objective-C files, but you don’t want to include them in the analysis?

What does your project structure look like?

Ann