We have a relatively large project that we’re using with sonarqube (800k lines of c#, 200k lines of vb).
Regular scans are relatively fine, but take roughly 1 hour with our whole build process (sonarqube adds nearly 45 minutes).
We would like to enable scans on pull requests, but without the entire overhead.
I tried passing a list of changed files to sonar.source (using a mixture of git + powershell fun), but it analyses all of the files anyway when using Integrate with MSBuild. It seems to get the list from msbuild and append my list of files to the bottom (checked the .properties file on the build server).
I also tried switching to the standalone scanner, and it just analyses the files that I send it.
However, it doesn’t find any issues, I believe because c#/vb files are meant to be done with Integrate with MSBuild.
Is there a way to either:
a) analyse c#/vb with the standalone scanner
b) limit the files analysed with msbuild?
Must-share information (formatted with Markdown):
- SonarQube version: 188.8.131.5242
- Azure Devops (cloud)
- VSTS sonarqube plugin 4.0
- Trying to acheive: Pull request decoration on 1m SLOC repository in a reasonable time
- what have you tried so far to achieve this: passing a list of changed files, both with standalone scanner and with the msbuild integration