Hi team, We’ve been facing a persistent issue with JS taint analysis in SonarQube. One of our repositories takes over an hour to complete the scan and even started taking 24 hours after which we reverted some of the code, while other repositories finish within 1–2 minutes. We are running SonarQub…

Hi, First, can you try allocating more memory, using sonar.javascript.node.maxspace? A minimum of 4Gb is recommended, but for larger projects you may need more . HTH, Ann

Hi @ganncamp , we have already tried increasing heap size upto 12GB but no difference in scan time here are the latest logs with 8GB: <sonar.javascript.node.maxspace=8192> INFO: Configured Node.js --max-old-space-size=8192. 206 file(s) will be analysed by SonarJasmin. INFO: Analysis progress:…

Hi, Thanks for trying. Can you add -Dsonar.verbose=true to your analysis command line and provide the full log, redacted as necessary? Thx, Ann

Hi @ganncamp Here are the debug logs: logs-debug.txt (689.9 KB)

Hi, Thanks for the log. I need to confirm what I’m seeing here. This looks like a 2-hour jump…? You didn’t do any editing here, right? :sweat_smile: And what can you tell me about sonarqube-all/sonarqube-all-scanning/src/index.js? Thx, Ann

Hi @ganncamp , yeah it is correct, our taint analysis seems stuck at this file everytime and then completes after 1 - 1.5 hours. it is always the same behaviour summary of src/index.js Boots the application: loads configuration (nconf), environment-specific JSON files, and reads several key fil…

Hi, src/index.js → 179 lines of code for initializing and starting server and there is no tsconfig.json in the project.

Hi, Thanks for those details. On the face of it, 179 lines doesn’t seem egregious, but I suppose each of those lines is … heavy. BTW, I’ve since learned that while having a tsconfig.json can make the regular JS analysis more efficient, it has no impact on the taint analysis pass. Anyway, this is…

Taint analysis for JS repo takes long time

SonarQube Server / Community Build

ganncamp (G Ann Campbell) February 24, 2026, 1:20pm 9

Hi,

How long is this file? Is there a tsconfig.json file in your project? (E.G.)

Thx,
Ann

Topic		Replies	Views
Taint analysis for js takes long time SonarQube Server / Community Build sonarqube	3	77	July 23, 2025
Taint analysis for js takes long time SonarQube Server / Community Build sonarqube , taint-analysis , js	1	86	May 9, 2025
Taint analysis for js slowed down SonarQube Server / Community Build	9	212	April 30, 2025
Slow JS analysis for large project SonarQube Server / Community Build performance , security	4	198	December 19, 2024
Taint Analysis for Javascript/Typescript project code is taking long (> 1 hour) SonarQube Cloud javascript , sonarqube-cloud	7	782	May 2, 2024

Taint analysis for JS repo takes long time

Related topics