IAR compiler/ rule IDs Mapping / NXP S32K14x toolchain

[zjchen (dreamchen)]

1. When performing static analysis on a code project using the IAR compiler, is it necessary to deploy the compiler locally?
2. Mapping between rule IDs such as MISRA C and SonarQube IDs.
3. Does it support static code analysis for the NXP S32K14x toolchain?

[Colin]

Hey there.

@zjchen

1. When performing static analysis on a code project using the IAR compiler, is it necessary to deploy the compiler locally?

When using SonarQube Cloud, you will typically need to provide a compilation database, and the expectation is that you run analysis in the same environment as you built your code (with the compiler available to be probed). The exception here is if you’re using GitHub.com to store your code and want to take advantage of Automatic Analysis.

@zjchen

2. Mapping between rule IDs such as MISRA C and SonarQube IDs.

This might be helpful for you.

MISRA C/C++ rules implemented

Hey @Sampath_Subasinghe I’m pretty sure that as it stands, we don’t even have structured data regarding what rules map to which Misra guideline. Hopefully that changes soon. There are, however, references to external coding guidelines for many rules. You may be able to manually extract this data from rule descriptions in order to create your mapping (or use the API to parse the rule description). [image] This seemed like a fun job for GitHub Copilot, and this Python code actually seems to d…

@zjchen

3. Does it support static code analysis for the NXP S32K14x toolchain?

I really don’t know and have no way to test. If your compiler is supported you should be good to go.