Tsconfig.json files with comments are not scanned correctly

SonarQube Cloud
1

The Sonar Scanner can’t parse tsconfig.json files that contain comments:

21:31:25.784 WARN  Cannot parse 'packages/messageformat/tsconfig.json:12:1'
21:31:25.798 WARN  Cannot parse 'packages/i18n-types/tsconfig.json:16:1'
21:31:25.812 WARN  Cannot parse 'packages/intl-formatters/tsconfig.json:12:1'
21:31:25.814 WARN  Cannot parse 'packages/make-plural/tsconfig.json:12:1'

And the error appears in the UI: SonarQube Cloud

(Source file, CI step)

Comments in tsconfig.json have been accepted since TypeScript 1.8

This integration is on a GitHub repository using the SonarSource/sonarqube-scan-action@v6 GitHub action.

I don’t know what the effect is on the scanning of not being able to parse the tsconfig.json but it seems to me that it is a false positive of javascript:S2260 is it possible to treat tsconfig.json as a JSONC file instead of pure json?

6

Hello @onigoetz,

Thank you for the detailed report, including the example project, CI logs, and links to related discussions — that context is very helpful.

The issue SonarQube Cloud. is actually json:S2260 and not javascript:S2260. It is another analyzer (sonar-iac) that scans json files. It is know limitation of sonar-iac, because of the limitation of snakeyaml-engine used to parse JSON files.

Possible solutions for now:

  • remove all comments from tsconfig.json
  • disable json:S2260 rule in your Quality Profile

Best
Marcin Stachniuk

8

Thanks Marcin

Oh indeed, that’s a typo from my part on the rule name.

Thanks, I will probably disable the rule in the quality profile.
Is there an issue I could follow either on your side or on the snakeyaml-engine side?

Best,
Stéphane