How to disable Sonar rules for specific files?
Since SonarQube 4.0, you can define issue exclusion patterns based on rule key and file path pattern. On previous versions, you can rely upon the Switch Off Violations plugin.
sonarqube
Stop sonar on window 64
First try to stop the SonarStart.bat by using Ctrl+c as suggested , and then try to open localhost:9000 ( or whichever port you configured sonar server). If it is still opening then go to task manager and search for wrapper.exe service and stop the service, if no service or app is found then goto: Task … Read more
How to recover admin password for SonarQube
Just an update to this the new link is here: https://docs.sonarqube.org/latest/instance-administration/security/#header-3 As it says on the link you can do this: In case you lost the admin password of your SonarQube instance, you can reset it by executing the following query: PostgreSQL and Microsoft SQL Server update users set crypted_password=’100000$t2h8AtNs1AlCHuLobDjHQTn9XppwTIx88UjqUm4s8RsfTuXQHSd/fpFexAnewwPsO6jGFQUv/24DnO55hY6Xew==’, salt=”k9x9eN127/3e/hf38iNiKwVfaVk=”, hash_method=’PBKDF2′, reset_password=’true’, user_local=”true” where … Read more
Error in sonar startup, Unable to start JVM: No such file or directory (2)
Issue was in the wrapper.conf where the java wrapper command was not getting resolved. It worked if I give the absolute path – ‘wrapper.java.command=/path/to/my/jdk/bin/java’ This could be an issue with an environment on a host.. not sure. Few things that helped me in troubleshooting this – log level changed to DEBUG in wrapper.conf comments given … Read more
The following projects do not have a valid ProjectGuid and were not built using a valid solution (.sln) thus will be skipped from analysis
As dotnet core projects (.csproj) will not have <ProjectGuid>…</ProjectGuid> tag specified in the default template this needs to be manually added. So you need to edit the .csproj file like this: <PropertyGroup> <!– other properties here –> <!– SonarQube needs this –> <ProjectGuid>{E2CEBBAF-6DF7-41E9-815D-9AD4CF90C844}</ProjectGuid> Make sure to place your own GUID inside the <ProjectGuid>…</ProjectGuid> Tag
SonarQube Runner vs Scanner
Answer is very simple: “Runner” is the old name for “Scanner”. Everything you need to know about the different SonarQube Scanners is available on the Scanners part of the official documentation. If you’re stuck to Java 7, then you can use: SonarQube Runner (sonar-runner) up to version 5.5 of SonarQube SonarQube Scanner (sonar-scanner) 2.6.1
Disallow anonymous users to access Sonar
You can set the “sonar.forceAuthentication” to “true” in the web admin interface: See http://docs.sonarqube.org/display/SONAR/Authentication for more details.
Sonarqube 5 – how do I mark false-positive?
I have found the answer here: False Positive option don’t appear on projects The issue is that although the admin LDAP group I belong to was granted “Administer System” rights in Global Permissions, it also needs to be added excplicitly to Project Permissions (either per project, or to the default template).
How do I use, or set up sonar-project.properties file?
Here are some resources to get you started https://www.wrightfully.com/setting-up-sonar-analysis-for-c-projects/ – See Step 6: The sonar-project.properties file. https://docs.sonarqube.org/display/SCAN/Analyzing+with+SonarQube+Scanner There are also some sample projects on github, you can refer to the project.properties files there as well, https://github.com/SonarSource/sonar-scanning-examples
sonarqube + lombok = false positives
This case should be perfectly handled by SonarJava. Lombok annotations are taken into account at least since version 3.14 (SONARJAVA-1642). The issues you are getting are resulting from a misconfiguration of your Java project. No need to write any custom rules to handle this, this is natively supported by the analyzer. SonarJava reads bytecode to … Read more