Sonarqube to scan and report issues only issues related to Java 8

SonarQube Server / Community Build
1

Currently using 8.4.2 version of SonarQube ,sonar-scanner-4.5 .Configured a jenkins job , sonarscanner is added in global configuration tool and properties set to scan java 8 project

JAVA_HOME is set to jdk 11 for sonarqube server and scanner is running with jdk 8 (JAVA_HOME environment variable point to Java 8 where scanner is executed)

In the properties though we have specified sonar.java.source=1.8 but rules targeting Java 11 are executed and issues raised for that.

can you please suggest what additional configuration required to scan and report issues only with rules targeting java8

Thanks in advance

2

Hello @Suganthi
Thanks for reaching out to the community.
Could you provide some example of the Java11 related rules that are raising some issues in your Java8 project code?
Were you aware of MMF-2244 which is available in SonarQube 8.7? If your project uses the SonarQube maven scanner in version 3.8, it should get the new sonar.java.jdkHome parameter populated automatically.

Let me know.

Best regards
Sylvain

3

Hi Sylvain,

Thanks for your response

Remove this use of “newInstance”; it is deprecated.Why is this an issue?
this is the code smell reported and rule triggerred is “@Deprecated” code should not be used
(in IDE this shows as deprecated since java 9)

can you please suggest any options for sonarqube 8.4.2 and we are using sonar scanner cli 4.5 version that would be really helpful

4

Hello @Suganthi
if the class has been deprecated in Java 9, then an analysis with Java 8 should not raise this issue.
You may need to check which JVM it actually used by your scanner. The scanner binaries we provide includes their own JRE (in version 11), except for the OS agnostic package (ANY):
https://docs.sonarqube.org/latest/analysis/scan/sonarscanner/

Best regards
Sylvain

5

Hi Sylvain,

JAVA_HOME is already set to java 8 in the linux server where scanner is executed. In Jenkins log could see java 11 used may be from scanner binaries

22:00:51 INFO: SonarScanner 4.5.0.2216
22:00:51 INFO: Java 11.0.3 AdoptOpenJDK (64-bit)

in order to run scanner with java 8 , please inform what need to updated in
scanner-install-dir/conf/sonar-scanner.properties

Thanks in advance

6

Hello
there is no possibility to use the system JRE with the scanner that embeds its own JRE, which is your case.
If you want the scanner to use the linux server JRE that is pointed at by the JAVA_HOME environment variable, you need to use the SonarScanner that does not include this JRE, available for download from SonarScanner | SonarQube Docs

And of course, upgrading your SonarQube to 8.7 is probably the best course of action here.

Best regards
Sylvain