SonarJava 6.0.1 is slower than 5.14 and this impacts our PR analysis time

[pranav-jobvite (Pranav Bhargava)]

our builds have started taking 3x more time… With the rules we had in place, it used to take 10mins for the analysis and now its taking ~30mins… This is really unacceptable for our PR workflow… Wondering what can we do here? Is there a timeline to look at the performance issues?

[MikeN (Mike Noordermeer)]

We went from 2 minutes to 8 or so, not too great either. Is there anything we can do to speed this up and/or help in debugging the performance of Sonar?

[Rebse (Gilbert Rebhan)]

Don’t think you can do much about, better stay with SonarJava 5.14 for now.
Had the same experience, it’s even a bit more than 3x.
Already opened a support case with debug logs, see

SonarJava 6.0.1 3 times slower than 5.14

Hi Alex, did some tests with the new SonarJava 6.0.1 (build 20589) and i can confirm @pranav-jobvite findings. Used our most problematic Java legacy project for an initial scan. Sonarqube 8.1 (build 31237) with SonarJava 6.0.1 (build 20589) Total time: 305 minutes 41 seconds Sonarqube 8.1 (build 31237) with SonarJava 5.14 (build 18788) Total time: 83 minutes 44 seconds It means it’s even more than 3x times, this is a showstopper even if more issues are found As this was an in…

Let’s see what the guys come up with.
I only wonder why this massive performance loss didn’t came up with the tests already !?
This is too obvious to be overseen.

[cmueller (Clint Mueller)]

We’re seeing the exact same issue on our end - Sonar 8.1 with SonarJava 6.0.1. Went from ~25 minutes to 4 hours analysis time. Seeing the comment on the Java Analyzer changes being integrated into Sonar 8.2 here:

Java analyzer v6.0: more accurate analysis, with fewer false-positives

Hello Java developers, During the last 6 months we did a full rewrite of our Java analyzer and its 550+ rules to use the Eclipse Compiler for Java (ECJ, part of Eclipse JDT Core Component). Why? ECJ offers an incredibly more precise semantic resolution, which leads to more accurate results and fewer false positives for rules that use semantic information. In addition to the overall improvements, this move allowed us to fix 24 bugs and 19 false-positive tickets. Support of Java 13 You can now …

I’m concerned about being able to stay up to date.

[Quentin (Quentin Jaquier)]

Hello everyone, thanks for your inputs.

The issue you are talking about is related to MMF-1870.

We are fully aware of it and we are considering solutions to tackle it. I added this post to the ticket to keep track of it, you will be able to follow the evolution there.

In the meantime, it would be very helpful if you confirm that it is indeed Sensor JavaSquidSensor badly impacting performances, and not others sensors (JavaSecuritySensor, other language sensor, …), in order to eliminate others variable from the equation. You will find execution time in the analysis logs:

Sensor JavaSquidSensor [java] (done) | time=1234ms

Best,
Quentin

[Rebse (Gilbert Rebhan)]

Hi,

there’s already an exisiting support ticket, see

SonarJava 6.0.1 3 times slower than 5.14

Hi Alex, did some tests with the new SonarJava 6.0.1 (build 20589) and i can confirm @pranav-jobvite findings. Used our most problematic Java legacy project for an initial scan. Sonarqube 8.1 (build 31237) with SonarJava 6.0.1 (build 20589) Total time: 305 minutes 41 seconds Sonarqube 8.1 (build 31237) with SonarJava 5.14 (build 18788) Total time: 83 minutes 44 seconds It means it’s even more than 3x times, this is a showstopper even if more issues are found As this was an in…

The test uses the latest SonarScanner for Ant, as our legacy projects still use Ant as buildtool.

with SonarJava 5.14
[sonar:sonar] Sensor JavaSquidSensor [java] (done) | time=412283ms

with SonarJava 6.01
[sonar:sonar] Sensor JavaSquidSensor [java] (done) | time=11706070ms

Gilbert

[MikeN (Mike Noordermeer)]

Yes, it is JavaSquidSensor that is taking up the time. I do not have the old log, but the new log is showing more than 6 mins with JavaSquidSensor (and in the old situation Sonar was done after 2 minutes).

2020-01-22T15:58:48.3167872Z 15:58:46.429 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=60100ms
2020-01-22T15:58:53.2206119Z 15:58:51.214 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=1674ms
2020-01-22T15:59:47.7198838Z 15:59:45.978 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=54692ms
2020-01-22T15:59:55.6230383Z 15:59:54.852 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=8035ms
2020-01-22T16:00:16.9165664Z 16:00:15.057 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=19975ms
2020-01-22T16:00:19.1165988Z 16:00:17.045 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=1665ms
2020-01-22T16:00:34.3193532Z 16:00:32.382 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=15235ms
2020-01-22T16:00:36.6193027Z 16:00:35.285 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=2458ms
2020-01-22T16:00:39.3194819Z 16:00:37.302 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=1949ms
2020-01-22T16:00:45.2272900Z 16:00:43.232 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=5752ms
2020-01-22T16:00:45.2323374Z 16:00:43.829 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=464ms
2020-01-22T16:01:07.5194314Z 16:01:05.749 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=21870ms
2020-01-22T16:01:15.4194461Z 16:01:13.408 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=7380ms
2020-01-22T16:02:36.7164415Z 16:02:34.832 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=81272ms
2020-01-22T16:02:50.6237249Z 16:02:50.387 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=13652ms
2020-01-22T16:02:54.6193573Z 16:02:52.745 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=2035ms
2020-01-22T16:02:57.9205546Z 16:02:55.852 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=2998ms
2020-01-22T16:02:57.9456723Z 16:02:57.545 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=1565ms
2020-01-22T16:03:00.6198400Z 16:02:58.960 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=1288ms
2020-01-22T16:03:05.0294971Z 16:03:03.151 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=4106ms
2020-01-22T16:03:05.0505609Z 16:03:03.418 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=193ms
2020-01-22T16:03:07.7200479Z 16:03:05.732 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=2274ms
2020-01-22T16:03:27.0168167Z 16:03:26.296 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=20475ms
2020-01-22T16:03:29.7203003Z 16:03:29.222 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=2521ms
2020-01-22T16:03:32.0175768Z 16:03:29.935 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=604ms
2020-01-22T16:03:39.8196931Z 16:03:37.948 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=7929ms
2020-01-22T16:03:42.6176165Z 16:03:40.595 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=2415ms
2020-01-22T16:03:45.1207398Z 16:03:44.043 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=3291ms
2020-01-22T16:03:45.1363332Z 16:03:44.675 [INFO] [org.sonarqube.gradle.SonarQubeTask] Sensor JavaSquidSensor [java] (done) | time=523ms

[MikeN (Mike Noordermeer)]

I can confirm we are back to the old performance levels with sonar-java 6.3. Thanks for fixing this.

[ganncamp (G Ann Campbell)]

Woo hoo!

Thanks for the follow-up @MikeN!

 
Ann