Julien Lancelot f6028da201 SONAR-12131 Compute Security Review Rating measures on projects * Compute Security Review Rating measures on projects * Live update Security Review Rating measures		vor 5 Jahren
.travis	BUILD-478 Set TRAVIS_BUILD_DIR in ramdisk	vor 6 Jahren
docs	Add contributing guide, revise related docs	vor 5 Jahren
gradle/wrapper	Upgrade gradle wrapper to 5.4.1	vor 5 Jahren
plugins	SONAR-11973 Update Xoo plugin for new sonarsourceSecurity facet testing	vor 5 Jahren
scripts	Add support for Windows in ./scripts/start.sh	vor 5 Jahren
server	SONAR-12131 Compute Security Review Rating measures on projects	vor 5 Jahren
sonar-application	SONAR-11251 add http.nonProxyHosts to sonar.properties	vor 5 Jahren
sonar-check-api	Fix license headers for 2019	vor 5 Jahren
sonar-core	SONAR-12131 Compute Security Review Rating measures on projects	vor 5 Jahren
sonar-duplications	SONAR-12108 Support Java 11 RTE	vor 5 Jahren
sonar-markdown	Fix license headers for 2019	vor 5 Jahren
sonar-plugin-api	SONAR-12131 Compute Security Review Rating measures on projects	vor 5 Jahren
sonar-scanner-engine	SONAR-12181 Improve the error message when using sonar.branch.name on Community Edition	vor 5 Jahren
sonar-scanner-engine-shaded	Move To Gradle	vor 6 Jahren
sonar-scanner-protocol	Upgrade assertj-core to 3.12.2 and assertj-guava to 3.2.1 for compatibility with Java 11	vor 5 Jahren
sonar-shutdowner	SONAR-12042 add force-stop option to Linux's sonar.sh	vor 5 Jahren
sonar-testing-harness	Delete unused methods in org.sonar.test.html classes	vor 5 Jahren
sonar-ws	SONAR-12038 Add pendingTime to api/ce/activity_status and ComputeEngineTasks JMX metrics	vor 5 Jahren
sonar-ws-generator	Fix sonar-ws-generator/README	vor 5 Jahren
.cirrus.yml	SONAR-12037 Run cluster ITs on Cirrus	vor 5 Jahren
.gitignore	Exclude .directory from Git	vor 5 Jahren
.travis.yml	Use JDK 11 in Travis CI	vor 5 Jahren
HEADER	Enforce build reproducibility by fixing year in copyright headers	vor 5 Jahren
LICENSE.txt	Add LICENSE.txt	vor 8 Jahren
NOTICE.txt	Add NOTICE.txt file [ci skip]	vor 7 Jahren
README.md	Document and upgrade Gradle plugins	vor 5 Jahren
build.gradle	SONAR-11871 upgrade elasticsearch to 6.8.0	vor 5 Jahren
build.sh	Double-quote variables used in command arguments in Bash	vor 5 Jahren
debug-server.sh	SONAR-5709 Add properties sonar.search.javaAdditionalOpts and sonar.web.javaAdditionalOpts	vor 9 Jahren
enable-organizations.sh	[scripts] use a more portable bash shebang	vor 6 Jahren
gradle.properties	Enable Gradle cache by default	vor 5 Jahren
gradlew	Move To Gradle	vor 6 Jahren
gradlew.bat	Move To Gradle	vor 6 Jahren
logs.sh	[script] add logs.sh + tail all SQ log files in start.sh	vor 7 Jahren
settings.gradle	SONAR-12042 add force-stop option to Linux's sonar.sh	vor 5 Jahren
start.sh	[SCRIPTS] add support for patches to start.sh	vor 8 Jahren
stop.sh	SONAR-10690 start.sh, stop.sh & logs.sh support SQ editions	vor 6 Jahren
travis.sh	Do not disable recording of code coverage in builds outside of CI	vor 5 Jahren

SonarQube

Continuous Inspection

SonarQube provides the capability to not only show health of an application but also to highlight issues newly introduced. With a Quality Gate in place, you can fix the leak and therefore improve code quality systematically.

Have Question or Feedback?

For support questions (“How do I?”, “I got this error, why?”, …), please first read the documentation and then head to the SonarSource forum. There are chances that a question similar to yours has already been answered.

Be aware that this forum is a community, so the standard pleasantries (“Hi”, “Thanks”, …) are expected. And if you don’t get an answer to your thread, you should sit on your hands for at least three days before bumping it. Operators are not standing by. :-)

Contributing

If you would like to see a new feature, please create a new thread in the forum “Suggest new features”.

Please be aware that we are not actively looking for feature contributions. The truth is that it’s extremely difficult for someone outside SonarSource to comply with our roadmap and expectations. Therefore, we typically only accept minor cosmetic changes and typo fixes.

With that in mind, if you would like to submit a code contribution, please create a pull request for this repository. Please explain your motives to contribute this change: what problem you are trying to fix, what improvement you are trying to make.

Make sure that you follow our code style and all tests are passing (Travis build is executed for each pull request).

Building

To build sources locally follow these instructions.

Build and Run Unit Tests

Execute from project base directory:

./gradlew build

The zip distribution file is generated in sonar-application/build/distributions/. Unzip it and start server by executing:

# on linux
bin/linux-x86-64/sonar.sh start 
# or on MacOS
bin/macosx-universal-64/sonar.sh start
# or on Windows
bin\windows-x86-64\StartSonar.bat

Open in IDE

If the project has never been built, then build it as usual (see previous section) or use the quicker command:

./gradlew ide

Then open the root file build.gradle as a project in Intellij or Eclipse.

Gradle Hints

./gradlew command	Description
`dependencies`	list dependencies
`dependencyCheckAnalyze`	list vulnerable dependencies
`dependencyUpdates`	list the dependencies that could be updated
`licenseFormat --rerun-tasks`	fix source headers by applying HEADER.txt
`wrapper --gradle-version 5.2.1`	upgrade wrapper

License

Licensed under the GNU Lesser General Public License, Version 3.0

README.md