which versions are you using (SonarQube Server / Community Build, Scanner, Plugin, and any relevant extension): SonarScanner CLI 7.2.0.5079, Windows 11 10.0 amd64, SonarQube Server 10.7.0.96327, Java 17.0.11 Eclipse Adoptium (64-bit).
how is SonarQube deployed: no idea, I don’t have knowledge about the server side
what are you trying to achieve: do SCA on multiple components separately, and compare the SQ findings with my Polyspace findings. Up until now, they don’t match at all
what have you tried so far to achieve this: run with general settings, try to force my compiler with JSON file.
Hi,
As I could gather from the SQ website and the forums, you do not support Tasking compilers natively. Is there any workaround I could try to make it work?
We have a CMake build environment, but specifying the compile_commands.json file resulted in an ERROR.
Should/could I create a build-wrapper while compiling and creating my library?
Tricore is not supported (CPP-2577). However, you are using a verison of SonarQube that supports C/C++ AutoConfig, which means that you can run analysis without running the build wrapper / providing a compilation database. You just need to remove the analysis parameter defining the path to the build wrapper output.
Your version is also past EOL. You should update to either the latest version or the current LTA (long-term active version) at your earliest convenience. Your update path is:
Thanks for detailing the update steps, I didn’t even know we’re outdated with SQ
On the other hand, neither MISRA C 2023, nor my compiler is supported - not even in your latest version-, so I think we need to return to good old Polyspace for doing SCA. Else QA will kick our butts!
P.S. Yes, I’ve found AutoConfig, but I don’t like what I see in the log files..
11:22:40.211 INFO The following rules aren’t available in AutoConfig mode: [S819, S820, S860, S878, S905, S961, S1068, S1235, S2275, S3744, S4263, S5265, S5276, M23_324, S930, S950, S1914, S5536]
11:22:43.262 WARN Unable to find any MSVC installation directory using vswhere
If your project relies on Windows SDK, please make sure the VS is installed correctly and this problem is resolved for better analysis quality.
11:22:43.270 INFO AutoConfig detected dependencies:
11:22:47.612 WARN C and C++ AutoConfig is inadvisable for this project. Consider setting the properties in Project Administration > General Settings > C / C++ / Objective-C > AutoConfig Settings. Otherwise, you should switch to Compilation Database based analysis for better analysis quality.
