Is it possible to analyce vbnet code without building the project?

SonarQube
1

Must-share information (formatted with Markdown):

  • which versions are you using (SonarQube Version 6.7.4 (build 38452), Scanner: SonnarScanner for MSBuild 4.5.0 (.NET &fwk), SonarQube Scanner 3.3.0, Plugin: SonarVB 7.9, and any relevant extension).

  • what are you trying to achieve
    Hi all, newby here…
    I’m trying to analyze .vb files, without of .proj or .sln and I wanted to know if this was possible, either by using the scanner or the MSBuild scannner.

  • what have you tried so far to achieve this
    I have tried to perform the analysis with both scanners and I have not obtained any results.

I can not configure the MSBuild scanner without indicating in the / rebuild where these files are,so i get this mesage:

MSBUILD : error MSB1003: Especifique un archivo de proyecto o de soluci¢n. El directorio de trabajo actual no contiene un archivo de proyecto ni de soluci¢n.

MSBUILD: error MSB1003: Specify a project or solution file. The current working directory does not contain a project or solution file.

Performing the analysis with the normal scanner ends up in a suscecfull state but does not perform any analysis. Attached traces.

18:42:58.676 INFO: Sensor VB.NET Properties [vbnet]
18:42:58.677 WARN: Property missing: ‘sonar.vbnet.analyzer.projectOutPaths’. No protobuf files will be loaded for this project.
18:42:58.678 WARN: No Roslyn issues report found for this project.
18:42:58.678 INFO: Sensor VB.NET Properties [vbnet] (done) | time=2ms
18:42:58.678 INFO: Sensor VB.NET [vbnet]
18:42:58.680 INFO: Sensor VB.NET [vbnet] (done) | time=2ms
18:42:58.680 INFO: Sensor Zero Coverage Sensor
18:42:58.694 INFO: Sensor Zero Coverage Sensor (done) | time=14ms
18:42:58.694 INFO: Sensor CPD Block Indexer
18:42:58.694 DEBUG: org.sonar.scanner.cpd.deprecated.DefaultCpdBlockIndexer is used for vbnet
18:42:58.694 DEBUG: No CpdMapping for language vbnet
18:42:59.583 INFO: Analysis report generated in 874ms, dir size=1 MB
18:42:59.681 INFO: Analysis reports compressed in 98ms, zip size=172 KB
18:42:59.681 INFO: Analysis report generated in C:\Program Files (x86)\Jenkins\workspace\sonarscanner\fundos-1.2.0.3.scannerwork\scanner-report
18:42:59.681 DEBUG: Upload report
18:42:59.742 INFO: ANALYSIS SUCCESSFUL, you can browse

Thanks u all!

2

Hi @Frederic, VB.NET (and C#) need to be built in order to be analyzed. Our .NET analyzers are actually plugins for the compiler and work during the compilation of the project. In addition, to analyze .NET source code you have to use Scanner for MSBuild, as it provides the needed integration with the build process that allows the analyzers to work correctly.

3

Hi @Val

what I thought, thank you for confirming me and for your attention.
Regards!