Import Cppcheck SARIF

[danmar (Daniel Marjamäki)]

I am the maintainer of the Cppcheck static analysis tool.

As far as I understand SonarQube supports SARIF.

Do you know if SonarQube supports the SARIF output from Cppcheck? Would you like some sample report(s) from me or anything?

Cppcheck will write a SARIF report if --output-format=sarif is specified on the command line.

[Colin]

Hey @danmar

I haven’t tried importing reports from cppcheck myself, but you should be able to try it out just by passing the report to sonar.sarifReportPaths as documented! Let us know the results!