Scanning a C# Project

SonarQube
1

Hello.

I have an asp.net project which I want to analyse with my Sonarqube 7.3 enterprise.
How can I make the analysis?

I tried using Sonar-Scanner but I got 0 for everything: bugs, vulnerabilities, codesmells, duplications. I found this strange.

image
image.png1007×159 9.23 KB

Can you point me in the right direction?

My sonar-project.properties looks like this:

sonar.projectKey=AAA
sonar.projectName=AAA
sonar.projectVersion=1.0
sonar.sources=.

I’ve also tried to do this using C# plugin.
https://docs.sonarqube.org/pages/viewpage.action?pageId=1441900

I’ve done all the stated procedure.
when I run the the analysis in my command line, using this command:
SonarScanner.MSBuild.exe begin /k:“AAA” /n:“AAA” /v:“1.0”

image
image.png935×229 48.2 KB

MSBuild.exe /t:Rebuild

image
image.png956×401 171 KB

SonarScanner.MSBuild.exe end

image
image.png1002×998 102 KB

image
image.png1573×989 225 KB

image
image.png1136×857 143 KB

I get this (the same):

image
image.png989×150 9.26 KB

WHat are the recommended options to scan asp.net code? What am i doing wrong?

3

Hi @Fr0zt,

Are you really expecting to have some issues on this project? The build status shows no warning so it seems normal you don’t see any Bug/Vulnerability/Code Smell on SonarQube.

4

I think the code is ok but I am not sure.

From both methods I’ve stated above which one do you think it’s the best for doing scans in such a project? using sonnar-scaner or SonarScanner.MSBuild.exe?

5

Sorry I missed the second part of your initial question. In order to have C#/VB.Net features you HAVE TO use the Scanner for MSBuild.