SonarCloud: Scan shell scripts

[znerd (Ernst de Haan)]

It would be great if SonarCloud would support the scanning of shell scripts.

Benefits:

• allows SonarCloud users to scan shell scripts (such as Bourne, Bash and zsh code)
• feature parity with SonarQube, see GitHub - sbaudoin/sonar-shellcheck: SonarQube plugin to analyze Shell scripts with ShellCheck
• feature parity with Code Climate, see ShellCheck

Shell scripts remain important for many use cases, and can typically not easily be replaced by other types of code. The fact that SonarCloud does not support scanning of such files is a potentially a concern or even a liability.

[Mick_Sheppard]

This would be really useful for us too.

We are using some external checking at the moment but it would be good to be able to scan the bash in with the rest of the code and have a single place to check our code quality.

[Alexandre_Gigleux]

Hello,

There is no short-term plan to provide a “shell” analyzer while, I agree with you, it would make sense.

As a developer, we master a couple of programming languages but when it comes to shell because this is not the language we practice on a daily basis it’s more likely we will make mistakes, and where Sonar could bring a lot.

Alex