# \#maven **URL:** https://community.sonarsource.com/tag/maven/28.md [Latest](https://community.sonarsource.com/latest.md) · [Categories](https://community.sonarsource.com/categories.md) · [Tags](https://community.sonarsource.com/tags.md) --- ## [Configuring a secured GitHub workflow to launch a Sonar analysis for PR from forks](https://community.sonarsource.com/t/configuring-a-secured-github-workflow-to-launch-a-sonar-analysis-for-pr-from-forks/141898)
**Author:** [@rolnico](https://community.sonarsource.com/u/rolnico)\ **Replies:** 13\ **Last updated:** [August 11, 2026, 12:51pm UTC](https://community.sonarsource.com/t/configuring-a-secured-github-workflow-to-launch-a-sonar-analysis-for-pr-from-forks/141898 "2026-08-11T12:51:40Z")
Hi there :slight\_smile: We are facing an issue in our Java project with PR coming from forks. Objective We would like to run the Sonar analysis on PR coming from forks and have them validate the “SonarCloud Code Analys… --- ## [SonarScanner for Maven should auto-propagate -s settings.xml to the SCA internal process](https://community.sonarsource.com/t/sonarscanner-for-maven-should-auto-propagate-s-settings-xml-to-the-sca-internal-process/186501)
**Author:** [@CMM](https://community.sonarsource.com/u/CMM)\ **Replies:** 1\ **Last updated:** [July 27, 2026, 3:44pm UTC](https://community.sonarsource.com/t/sonarscanner-for-maven-should-auto-propagate-s-settings-xml-to-the-sca-internal-process/186501 "2026-07-27T15:44:34Z")
When using SonarQube Advanced Security with the SonarScanner for Maven and a private Maven repository (e.g. Artifactory, Nexus), users typically pass their custom settings.xml to the outer Maven command using the standar… --- ## [Maven Project Onboarding Maven properties vs System properties](https://community.sonarsource.com/t/maven-project-onboarding-maven-properties-vs-system-properties/185917)
**Author:** [@simasch](https://community.sonarsource.com/u/simasch)\ **Replies:** 2\ **Last updated:** [July 17, 2026, 8:57am UTC](https://community.sonarsource.com/t/maven-project-onboarding-maven-properties-vs-system-properties/185917 "2026-07-17T08:57:52Z")
Why is the sonar.organization a Maven property and the sonar.projectKey a system property? This looks silly to me because you can do both as a system property or as a Maven property. Is there a particular reason for th… --- ## [Suspicious multiple warnings about encoding on binary files](https://community.sonarsource.com/t/suspicious-multiple-warnings-about-encoding-on-binary-files/153706)
**Author:** [@lrozenblyum](https://community.sonarsource.com/u/lrozenblyum)\ **Replies:** 8\ **Last updated:** [July 3, 2026, 8:31am UTC](https://community.sonarsource.com/t/suspicious-multiple-warnings-about-encoding-on-binary-files/153706 "2026-07-03T08:31:16Z")
ALM used: GitHub CI system used: Jenkins CI Scanner command used when applicable: mvn -Duser.home=/home//slave/workspace/CI-PR-1111/.home org.sonarsource.scanner.maven:sonar-maven-plugin:sonar --batch-mode -pl … --- ## [Sonar Scanner for Maven 5.7.0](https://community.sonarsource.com/t/sonar-scanner-for-maven-5-7-0/182992)
**Author:** [@tomasz.tylenda](https://community.sonarsource.com/u/tomasz.tylenda)\ **Replies:** 2\ **Last updated:** [June 26, 2026, 9:31am UTC](https://community.sonarsource.com/t/sonar-scanner-for-maven-5-7-0/182992 "2026-06-26T09:31:32Z")
We’re excited to announce the release of Sonar Scanner for Maven 5.7.0. This release focuses on improving compatibility with Maven 4 release candidates. We’ve introduced preliminary support for new features, including e… --- ## [Sonar-maven-plugin:5.6.0.6792 -\> Failed to query server version via Proxy](https://community.sonarsource.com/t/sonar-maven-plugin-5-6-0-6792-failed-to-query-server-version-via-proxy/182596)
**Author:** [@dschettl](https://community.sonarsource.com/u/dschettl)\ **Replies:** 1\ **Last updated:** [June 1, 2026, 8:47am UTC](https://community.sonarsource.com/t/sonar-maven-plugin-5-6-0-6792-failed-to-query-server-version-via-proxy/182596 "2026-06-01T08:47:46Z")
Runtime-Environment Sonarqube Server Enterprise Edition v2026.1.2 (121356) Docker Maven-Plugin sonar-maven-plugin:5.6.0.6792 Maven-Plugin connects to Sonarqube-Server via proxy-server Proxy-Data is definded in maven-se… --- ## [Retiring the magic \`sonar:sonar\` shorthand of the SonarScanner for Maven](https://community.sonarsource.com/t/retiring-the-magic-sonar-sonar-shorthand-of-the-sonarscanner-for-maven/179815)
**Author:** [@Dorian\_Burihabwa](https://community.sonarsource.com/u/Dorian_Burihabwa)\ **Replies:** 7\ **Last updated:** [May 12, 2026, 9:05am UTC](https://community.sonarsource.com/t/retiring-the-magic-sonar-sonar-shorthand-of-the-sonarscanner-for-maven/179815 "2026-05-12T09:05:58Z")
EDIT 2026-05-12: Added alternative solution inserting the scanner in the plugin groups of your local settings.xml TL;DR: To prevent any disruption in your analysis pipelines and keep on using mvn sonar:sonar, please mak… --- ## [SonarCloud doesn't add gate status comment on my PR](https://community.sonarsource.com/t/sonarcloud-doesnt-add-gate-status-comment-on-my-pr/180291)
**Author:** [@PoulpY2K](https://community.sonarsource.com/u/PoulpY2K)\ **Replies:** 1\ **Last updated:** [March 26, 2026, 1:03pm UTC](https://community.sonarsource.com/t/sonarcloud-doesnt-add-gate-status-comment-on-my-pr/180291 "2026-03-26T13:03:08Z")
Hello, I’m trying to setup a Maven Java project with SonarQube Cloud and I can’t seem to get the analysis report comment from SonarQube Cloud on my Pull Request. Example of what I want on my PR : I’m using Github w… --- ## [Toolchains support for SonarQube Scanner for Maven](https://community.sonarsource.com/t/toolchains-support-for-sonarqube-scanner-for-maven/18677)
**Author:** [@justoaguilar](https://community.sonarsource.com/u/justoaguilar)\ **Replies:** 6\ **Last updated:** [March 2, 2026, 10:41am UTC](https://community.sonarsource.com/t/toolchains-support-for-sonarqube-scanner-for-maven/18677 "2026-03-02T10:41:06Z")
As per https://maven.apache.org/guides/mini/guide-using-toolchains.html, Maven Toolchains provide a way for plugins to discover what JDK (or other tools) are to be used during the build, without the need to configure t… --- ## [Sonarqube Maven Scanner throws error "No plugin found for prefix 'sonar'"](https://community.sonarsource.com/t/sonarqube-maven-scanner-throws-error-no-plugin-found-for-prefix-sonar/172189)
**Author:** [@ksvmhn](https://community.sonarsource.com/u/ksvmhn)\ **Replies:** 1\ **Last updated:** [January 5, 2026, 3:18pm UTC](https://community.sonarsource.com/t/sonarqube-maven-scanner-throws-error-no-plugin-found-for-prefix-sonar/172189 "2026-01-05T15:18:00Z")
I am facing the below mentioned error in the Azure DevOps Pipeline. While checking the fix related to the error, its suggested to use org.sonarsource.scanner.maven:sonar-maven-plugin:sonar instead of sonar:sonar, and I … --- ## [Fixing \`No plugin found for prefix 'sonar'\`](https://community.sonarsource.com/t/fixing-no-plugin-found-for-prefix-sonar/152933)
**Author:** [@Dorian\_Burihabwa](https://community.sonarsource.com/u/Dorian_Burihabwa)\ **Replies:** 0\ **Last updated:** [November 24, 2025, 5:30pm UTC](https://community.sonarsource.com/t/fixing-no-plugin-found-for-prefix-sonar/152933 "2025-11-24T17:30:40Z")
If you experience issues when using the SonarScanner for Maven with the following message in your logs, you were most likely using the outdated, and unsupported, version 4.0.0.4121 of the scanner and might have missed th… --- ## [New Code Analysis Scope for unusual branching](https://community.sonarsource.com/t/new-code-analysis-scope-for-unusual-branching/152403)
**Author:** [@rhartinger](https://community.sonarsource.com/u/rhartinger)\ **Replies:** 1\ **Last updated:** [November 17, 2025, 2:52pm UTC](https://community.sonarsource.com/t/new-code-analysis-scope-for-unusual-branching/152403 "2025-11-17T14:52:42Z")
We are using SonarQube Server Developer Edition (2025.1.4 LTA) and trying to analyse “New Code” of one of our projects. Our branching/versioning is a bit unusual in this project: We use Maven and set the revision dur… --- ## [Maven 4.0.0-rc-3 throws UnsupportedOperationException](https://community.sonarsource.com/t/maven-4-0-0-rc-3-throws-unsupportedoperationexception/137235)
**Author:** [@froque](https://community.sonarsource.com/u/froque)\ **Replies:** 4\ **Last updated:** [November 3, 2025, 5:03pm UTC](https://community.sonarsource.com/t/maven-4-0-0-rc-3-throws-unsupportedoperationexception/137235 "2025-11-03T17:03:26Z")
Must-share information (formatted with Markdown): which versions are you using (SonarQube Server / Community Build, Scanner, Plugin, and any relevant extension) current lts-community how is SonarQube deployed: zip, … --- ## [How to prevent sonar-maven-plugin from merging properties across modules](https://community.sonarsource.com/t/how-to-prevent-sonar-maven-plugin-from-merging-properties-across-modules/149232)
**Author:** [@Dan\_Finucane](https://community.sonarsource.com/u/Dan_Finucane)\ **Replies:** 1\ **Last updated:** [September 25, 2025, 8:40am UTC](https://community.sonarsource.com/t/how-to-prevent-sonar-maven-plugin-from-merging-properties-across-modules/149232 "2025-09-25T08:40:57Z")
I’m using \ \org.sonarsource.scanner.maven\ \sonar-maven-plugin\ \5.1.0.4751\ \ I have a multi-module maven project with one parent pom.xml … --- ## [Maven: does the project key need to match the project maven coordinates?](https://community.sonarsource.com/t/maven-does-the-project-key-need-to-match-the-project-maven-coordinates/148866)
**Author:** [@jpalomaki](https://community.sonarsource.com/u/jpalomaki)\ **Replies:** 4\ **Last updated:** [September 19, 2025, 2:52pm UTC](https://community.sonarsource.com/t/maven-does-the-project-key-need-to-match-the-project-maven-coordinates/148866 "2025-09-19T14:52:02Z")
Hello, We are running into this issue with the latest version of the sonar maven plugin (5.2.0.4988), and to work around this, we would like to update the sonar project key to not match the submodule maven coordinates (… --- ## [\[Intellij Sonarlint plugin\] Respect pom.xml configurations](https://community.sonarsource.com/t/intellij-sonarlint-plugin-respect-pom-xml-configurations/130171)
**Author:** [@gitgdako](https://community.sonarsource.com/u/gitgdako)\ **Replies:** 1\ **Last updated:** [September 1, 2025, 3:58pm UTC](https://community.sonarsource.com/t/intellij-sonarlint-plugin-respect-pom-xml-configurations/130171 "2025-09-01T15:58:05Z")
There are multiple configs in Mavens pom.xml that change the behaviour of a run for Sonarqube. These configurations should be used by the Sonarlint plugin as well For example sonar.issue.ignore.multicriteria.\* is not us… --- ## [Maven 4 Support](https://community.sonarsource.com/t/maven-4-support/101631)
**Author:** [@Alexandre\_Gigleux](https://community.sonarsource.com/u/Alexandre_Gigleux)\ **Replies:** 0\ **Last updated:** [September 28, 2023, 1:29pm UTC](https://community.sonarsource.com/t/maven-4-support/101631 "2023-09-28T13:29:43Z")
Hello, Maven 4 has not yet been released but we did the work to make sure that when it is released, you will be able to use this new version to scan your code. The Scanner for Maven 3.10+ should be used along with Mave… --- ## [An API incompatibility was encountered (Encountered error upon execute of mvn sonar:sonar on project )](https://community.sonarsource.com/t/an-api-incompatibility-was-encountered-encountered-error-upon-execute-of-mvn-sonar-sonar-on-project/46876)
**Author:** [@spikerish](https://community.sonarsource.com/u/spikerish)\ **Replies:** 7\ **Last updated:** [June 29, 2025, 9:52pm UTC](https://community.sonarsource.com/t/an-api-incompatibility-was-encountered-encountered-error-upon-execute-of-mvn-sonar-sonar-on-project/46876 "2025-06-29T21:52:28Z")
Error encountered: Execution default-cli of goal org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.0.2155:sonar failed: An API incompatibility was encountered while executing org.sonarsource.scanner.maven:sonar-maven… --- ## [Sanner fails with "Orphan Module" Error on maven project](https://community.sonarsource.com/t/sanner-fails-with-orphan-module-error-on-maven-project/140699)
**Author:** [@viva](https://community.sonarsource.com/u/viva)\ **Replies:** 11\ **Last updated:** [May 28, 2025, 10:11pm UTC](https://community.sonarsource.com/t/sanner-fails-with-orphan-module-error-on-maven-project/140699 "2025-05-28T22:11:27Z")
Hi, There is error occuring after scan on a maven project. Error: Failed to execute goal org.sonarsource.scanner.maven:sonar-maven-plugin:5.1.0.4751:sonar (default-cli) on project trino-root: Unable to determine struc… --- ## [Component key length is longer than the maximum authorized (400)](https://community.sonarsource.com/t/component-key-length-is-longer-than-the-maximum-authorized-400/28142)
**Author:** [@iPasalski](https://community.sonarsource.com/u/iPasalski)\ **Replies:** 5\ **Last updated:** [May 19, 2025, 12:01pm UTC](https://community.sonarsource.com/t/component-key-length-is-longer-than-the-maximum-authorized-400/28142 "2025-05-19T12:01:13Z")
versions used SonarQube 6.7 error observed: Component key length (401) is longer than the maximum authorized (400) steps to reproduce: run run sonar on long project key on long sub module with long full qualify file nam… --- ## [Maven Sonar Scanner 5.0.0.4389 certs issue](https://community.sonarsource.com/t/maven-sonar-scanner-5-0-0-4389-certs-issue/135857)
**Author:** [@jabecker](https://community.sonarsource.com/u/jabecker)\ **Replies:** 2\ **Last updated:** [April 30, 2025, 7:21pm UTC](https://community.sonarsource.com/t/maven-sonar-scanner-5-0-0-4389-certs-issue/135857 "2025-04-30T19:21:48Z")
Versions SonarQube Version 2025.1 LTA Enterprise Maven 3.9 SonarLint 5.0.0.4389 SonarQube deployed: Docker what are you trying to achieve Trying to scan a java project with SonarLint 5.0.0.4389 without … --- ## [\[ERROR\] Failed to execute goal org.sonarsource.scanner.maven:sonar-maven-plugin:5.1.0.4751:sonar](https://community.sonarsource.com/t/error-failed-to-execute-goal-org-sonarsource-scanner-maven5-1-0-4751-sonar/138219)
**Author:** [@Manuel\_95](https://community.sonarsource.com/u/Manuel_95)\ **Replies:** 1\ **Last updated:** [April 4, 2025, 4:49pm UTC](https://community.sonarsource.com/t/error-failed-to-execute-goal-org-sonarsource-scanner-maven5-1-0-4751-sonar/138219 "2025-04-04T16:49:56Z")
Hi, I’ve SonarQube EE 10.5 with Azure DevOps integration and Apache Maven 3.9.6 installed. In the Azure pipeline I’ve the following tasks: - task: SonarQubePrepare@7 displayName: 'Prepare sonar properties' i… --- ## [Maven sonar scanner doesn't print module names correctly](https://community.sonarsource.com/t/maven-sonar-scanner-doesnt-print-module-names-correctly/46679)
**Author:** [@lrozenblyum](https://community.sonarsource.com/u/lrozenblyum)\ **Replies:** 1\ **Last updated:** [March 27, 2025, 3:53pm UTC](https://community.sonarsource.com/t/maven-sonar-scanner-doesnt-print-module-names-correctly/46679 "2025-03-27T15:53:28Z")
Our Jenkins executes a goal to run Sonar analyzing on a Multi-module reactor project via a command: mvn org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -pl …/ -pl …/ –also-make ${sonarArguments} -f ${W… --- ## [Maven plugin 5.1.0.4751 fails during Docker run command on Corretto Java 21](https://community.sonarsource.com/t/maven-plugin-5-1-0-4751-fails-during-docker-run-command-on-corretto-java-21/137757)
**Author:** [@SpanTcgplayer](https://community.sonarsource.com/u/SpanTcgplayer)\ **Replies:** 5\ **Last updated:** [March 26, 2025, 4:32pm UTC](https://community.sonarsource.com/t/maven-plugin-5-1-0-4751-fails-during-docker-run-command-on-corretto-java-21/137757 "2025-03-26T16:32:23Z")
ALM used Github CI system used: Github Scanner command used when applicable (private details masked) In Dockerfile RUN mvn clean package org.sonarsource.scanner.maven:sonar-maven-plugin:sonar Languages of th… --- ## [Caused by: java.util.regex.PatternSyntaxException: Dangling meta character '\*' near index 0](https://community.sonarsource.com/t/caused-by-java-util-regex-patternsyntaxexception-dangling-meta-character-near-index-0/137276)
**Author:** [@bademeister](https://community.sonarsource.com/u/bademeister)\ **Replies:** 1\ **Last updated:** [March 24, 2025, 4:20pm UTC](https://community.sonarsource.com/t/caused-by-java-util-regex-patternsyntaxexception-dangling-meta-character-near-index-0/137276 "2025-03-24T16:20:39Z")
Hello, I am getting the following error. I have not changed anything about how I call the scanner. The scan is done in a Github workflow, which has not changed either. at org.sonar.core.platform.ComponentContainer$Ext… --- ## [Java test coverage setting is wrong in multi-module maven project](https://community.sonarsource.com/t/java-test-coverage-setting-is-wrong-in-multi-module-maven-project/135614)
**Author:** [@hao2](https://community.sonarsource.com/u/hao2)\ **Replies:** 1\ **Last updated:** [February 24, 2025, 10:17am UTC](https://community.sonarsource.com/t/java-test-coverage-setting-is-wrong-in-multi-module-maven-project/135614 "2025-02-24T10:17:11Z")
${project.basedir} points to the submodule directory and unable to collect the coverage of sub-modules correctly. use ${maven.multiModuleProjectDirectory} instead ${maven.multiModuleProjectDirectory} always points to… --- ## [New Code with a Maven multimodule project in SonarLint for Eclipse - Module parent paths missing](https://community.sonarsource.com/t/new-code-with-a-maven-multimodule-project-in-sonarlint-for-eclipse-module-parent-paths-missing/135155)
**Author:** [@xavilopez](https://community.sonarsource.com/u/xavilopez)\ **Replies:** 1\ **Last updated:** [February 14, 2025, 10:02am UTC](https://community.sonarsource.com/t/new-code-with-a-maven-multimodule-project-in-sonarlint-for-eclipse-module-parent-paths-missing/135155 "2025-02-14T10:02:59Z")
Please provide Operating system: Windows 11 23H2 IDE name and version: Eclipse IDE 2024-06 (4.32.0) SonarQube for Eclipse plugin version: 10.2.0.78029 Programming language you’re coding in: Java Is connected mode used:… --- ## [Coverage missing from aggregate report in multi modules project](https://community.sonarsource.com/t/coverage-missing-from-aggregate-report-in-multi-modules-project/104204)
**Author:** [@rabestro](https://community.sonarsource.com/u/rabestro)\ **Replies:** 2\ **Last updated:** [January 9, 2025, 11:17am UTC](https://community.sonarsource.com/t/coverage-missing-from-aggregate-report-in-multi-modules-project/104204 "2025-01-09T11:17:43Z")
GitHub: Add multi-module Maven project for Sonar and Jacoco setup by rabestro · Pull Request #1 · rabestro/test-sonar-multimodules · GitHub CI system used: GitHub Actions Scanner command used mvn verify org.sonarsourc… --- ## [No SonarCloud Analysis available for PRs from fork](https://community.sonarsource.com/t/no-sonarcloud-analysis-available-for-prs-from-fork/132569)
**Author:** [@dedece35](https://community.sonarsource.com/u/dedece35)\ **Replies:** 1\ **Last updated:** [December 23, 2024, 8:53am UTC](https://community.sonarsource.com/t/no-sonarcloud-analysis-available-for-prs-from-fork/132569 "2024-12-23T08:53:44Z")
Hello, Could I have some news about this problem Make it possible for PR's from forks to run the SonarCloud scan · Issue #234 · Altinn/app-frontend-react · GitHub ? Currently, in my open-source project (GitHub - green-… --- ## [Incomplete code Coverage in multimodule maven project](https://community.sonarsource.com/t/incomplete-code-coverage-in-multimodule-maven-project/130649)
**Author:** [@jpmartins](https://community.sonarsource.com/u/jpmartins)\ **Replies:** 4\ **Last updated:** [November 19, 2024, 4:57pm UTC](https://community.sonarsource.com/t/incomplete-code-coverage-in-multimodule-maven-project/130649 "2024-11-19T16:57:24Z")
Hello, I am trying to get SonarQube to register integration test coverage on a big and messy Maven multi-module project. It seems to only register coverage of Java classes in the same module where the test is run. I ha… [Next page](https://community.sonarsource.com/tag/maven/28.md?match_all_tags=true&page=1&tags%5B%5D=maven)