Malena Ebert c5566b7b0e Update owasp-suppressions.xml		vor 3 Jahren
.github/workflows	SONAR-13921 Delete upgrade plugin github action	vor 3 Jahren
.travis	BUILD-753 Migrate IRIS task to Travis	vor 4 Jahren
docs	Update front-end pull request template	vor 4 Jahren
gradle/wrapper	Upgrade Gradle to 6.3	vor 4 Jahren
plugins	Update Xoo plugin	vor 3 Jahren
scripts	SONAR-12246 Remove unused mysql files	vor 4 Jahren
server	SONAR-13966 filter new code period issues for application using 'branch' field instead 'project'	vor 3 Jahren
sonar-application	increase maximum size of the archive	vor 3 Jahren
sonar-check-api	Format all headers for 2020	vor 4 Jahren
sonar-core	SONAR-13940 Add missing translation key for zero GitLab instances	vor 3 Jahren
sonar-duplications	Format all headers for 2020	vor 4 Jahren
sonar-markdown	Format all headers for 2020	vor 4 Jahren
sonar-plugin-api	SONAR-13844 Rename repositories from 'SonarAnalyzer' to 'SonarQube'	vor 3 Jahren
sonar-plugin-api-impl	SONAR-12841 Support AES 256 Settings Encryption	vor 3 Jahren
sonar-scanner-engine	SONAR-13869 Add a flag in telemetry to know if there's some c/c++ unanalyzed code	vor 3 Jahren
sonar-scanner-engine-shaded	Move To Gradle	vor 6 Jahren
sonar-scanner-protocol	SONAR-13867 Collect number of indexed C/C++ files in the scanner	vor 3 Jahren
sonar-shutdowner	Format all headers for 2020	vor 4 Jahren
sonar-testing-harness	Format all headers for 2020	vor 4 Jahren
sonar-testing-ldap	SONAR-13155 upgrade testing dependencies	vor 4 Jahren
sonar-ws	SONAR-13903 Remove use of organizations in Quality Profiles and Active Rules	vor 3 Jahren
sonar-ws-generator	SONAR-13155 upgrade commons-collection to fix vulnerability	vor 4 Jahren
.cirrus.yml	SONAR-13921 Drop upgrade plugins gh action	vor 3 Jahren
.dockerignore	fix documented docker build command line and make it run fast	vor 4 Jahren
.gitignore	SONAR-13597 Add scope distribution to issues page	vor 3 Jahren
.travis.yml	Updated Travis distribution to Ubuntu 18.04 (#2760)	vor 4 Jahren
HEADER	Update license templates for 2020	vor 4 Jahren
LICENSE.txt	Add LICENSE.txt	vor 8 Jahren
NOTICE.txt	Add NOTICE.txt file [ci skip]	vor 7 Jahren
README.md	added responsible disclosure guide to README.md	vor 3 Jahren
build.gradle	SONAR-13944 Upgrade RPG analyzer	vor 3 Jahren
build.sh	Double-quote variables used in command arguments in Bash	vor 5 Jahren
debug-server.sh	SONAR-5709 Add properties sonar.search.javaAdditionalOpts and sonar.web.javaAdditionalOpts	vor 9 Jahren
enable-organizations.sh	[scripts] use a more portable bash shebang	vor 6 Jahren
gradle.properties	Upgrade to 8.6	vor 3 Jahren
gradlew	Move To Gradle	vor 6 Jahren
gradlew.bat	Move To Gradle	vor 6 Jahren
logs.sh	[script] add logs.sh + tail all SQ log files in start.sh	vor 7 Jahren
owasp-suppressions.xml	Update owasp-suppressions.xml	vor 3 Jahren
owasp-vulnerabilities.xml	SONAR-13905 enable OWASP Dependency Check tool	vor 3 Jahren
settings.gradle	Gradle scripts should use `plugins` block	vor 4 Jahren
start.sh	[SCRIPTS] add support for patches to start.sh	vor 8 Jahren
stop.sh	SONAR-10690 start.sh, stop.sh & logs.sh support SQ editions	vor 6 Jahren
travis.sh	SONAR-13259 Fix branch analysis on Travis CI for public repo	vor 4 Jahren

SonarQube

Continuous Inspection

SonarQube provides the capability to not only show health of an application but also to highlight issues newly introduced. With a Quality Gate in place, you can Clean As You Code and therefore improve code quality systematically.

Have Question or Feedback?

For support questions (“How do I?”, “I got this error, why?”, …), please first read the documentation and then head to the SonarSource Community. The answer to your question has likely already been answered! 🤓

Be aware that this forum is a community, so the standard pleasantries (“Hi”, “Thanks”, …) are expected. And if you don’t get an answer to your thread, you should sit on your hands for at least three days before bumping it. Operators are not standing by. 😄

Contributing

If you would like to see a new feature, please create a new Community thread: “Suggest new features”.

Please be aware that we are not actively looking for feature contributions. The truth is that it’s extremely difficult for someone outside SonarSource to comply with our roadmap and expectations. Therefore, we typically only accept minor cosmetic changes and typo fixes.

With that in mind, if you would like to submit a code contribution, please create a pull request for this repository. Please explain your motives to contribute this change: what problem you are trying to fix, what improvement you are trying to make.

Make sure that you follow our code style and all tests are passing (Travis build is executed for each pull request).

Building

To build sources locally follow these instructions.

Build and Run Unit Tests

Execute from project base directory:

./gradlew build

The zip distribution file is generated in sonar-application/build/distributions/. Unzip it and start server by executing:

# on linux
bin/linux-x86-64/sonar.sh start 
# or on MacOS
bin/macosx-universal-64/sonar.sh start
# or on Windows
bin\windows-x86-64\StartSonar.bat

Open in IDE

If the project has never been built, then build it as usual (see previous section) or use the quicker command:

./gradlew ide

Then open the root file build.gradle as a project in Intellij or Eclipse.

Gradle Hints

./gradlew command	Description
`dependencies`	list dependencies
`dependencyCheckAnalyze`	list vulnerable dependencies
`dependencyUpdates`	list the dependencies that could be updated
`licenseFormat --rerun-tasks`	fix source headers by applying HEADER.txt
`wrapper --gradle-version 5.2.1`	upgrade wrapper

License

Licensed under the GNU Lesser General Public License, Version 3.0

README.md