https://sonarqube.inria.fr/2025-04-25T15:00:00+02:002025-04-25T15:00:00+02:002025-04-25T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2025-04-25:/sonarqubetm-updated-to-2412.html

<p>SonarQube^TM has been updated to v24.12.0.100206 !</p> <p>See the list of <a href="https://docs.sonarsource.com/sonarqube-server/latest/analyzing-source-code/languages/overview/">supported languages</a>.</p> <p>Additional plugins installed : C++ (sonar-cxx), Community Branch Plugin, Delphi, Groovy, Rust, ShellCheck, SoftViz3D, Yaml.</p> <p>Creedengo is the new name of the ecoCode initiative, see the <a href="https://green-code-initiative.org/">green code website</a>. The following Creedengo plugins have been …</p>

<p>SonarQube^TM has been updated to v24.12.0.100206 !</p> <p>See the list of <a href="https://docs.sonarsource.com/sonarqube-server/latest/analyzing-source-code/languages/overview/">supported languages</a>.</p> <p>Additional plugins installed : C++ (sonar-cxx), Community Branch Plugin, Delphi, Groovy, Rust, ShellCheck, SoftViz3D, Yaml.</p> <p>Creedengo is the new name of the ecoCode initiative, see the <a href="https://green-code-initiative.org/">green code website</a>. The following Creedengo plugins have been installed : C#, Java, JavaScript, PHP, Python.</p>2024-10-03T15:00:00+02:002024-10-03T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2024-10-03:/integration-with-gitlab.html<p>SonarQube^TM can now import projects from <a href="https://gitlab.inria.fr/">Inria's Gitlab</a> and merge request analysis is available: see the <a href="https://qlf-sonarqube.inria.fr/pages/documentation.html#3">documentation</a>.</p>2024-08-05T15:00:00+02:002024-08-05T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2024-08-05:/sonarqubetm-updated-to-996-lta.html

<p>SonarQube^TM has been updated to 9.9.6 LTA !</p> <p><a href="https://www.sonarsource.com/products/sonarqube/downloads/lts/9-9-lts/">LTS Release Upgrade Notes</a>.</p> <p><a href="https://sonarsource.atlassian.net/issues/SONAR-22366?jql=project%20%3D%2010139%20AND%20fixversion%20IN%20%289.9%2C%209.9.6%29">LTS Bug Fixes</a>.</p> <p>Kotlin is now handled natively by SonarQube^TM, the plugin is not necessary anymore. And the Groovy plugin v1.8 is not available in the current version of SonarQube^TM (makes the server …</p>

<p>SonarQube^TM has been updated to 9.9.6 LTA !</p> <p><a href="https://www.sonarsource.com/products/sonarqube/downloads/lts/9-9-lts/">LTS Release Upgrade Notes</a>.</p> <p><a href="https://sonarsource.atlassian.net/issues/SONAR-22366?jql=project%20%3D%2010139%20AND%20fixversion%20IN%20%289.9%2C%209.9.6%29">LTS Bug Fixes</a>.</p> <p>Kotlin is now handled natively by SonarQube^TM, the plugin is not necessary anymore. And the Groovy plugin v1.8 is not available in the current version of SonarQube^TM (makes the server crash when starting) so we removed it for now.</p>2023-03-16T15:00:00+01:002023-03-16T15:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2023-03-16:/new-plugin-_ecocode_-available.html

<p><a href="https://github.com/green-code-initiative/ecoCode">ecoCode</a> is a collective project aiming to reduce environmental footprint of software at the code level. The goal of the project is to provide a list of static code analyzers to highlight code structures that may have a negative ecological impact: energy and resources over-consumption, "fatware", shortening terminals' lifespan, etc …</p>

<p><a href="https://github.com/green-code-initiative/ecoCode">ecoCode</a> is a collective project aiming to reduce environmental footprint of software at the code level. The goal of the project is to provide a list of static code analyzers to highlight code structures that may have a negative ecological impact: energy and resources over-consumption, "fatware", shortening terminals' lifespan, etc.</p> <p>It is available for languages Java, PHP and Python.</p>2023-03-03T15:00:00+01:002023-03-03T15:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2023-03-03:/sonarqubetm-updated-to-99-lts.html<p>SonarQube^TM has been updated to 9.9 LTS !</p> <p><a href="https://www.sonarsource.com/products/sonarqube/downloads/lts/9-9-lts/">LTS Release Upgrade Notes</a>.</p> <p><a href="https://sonarsource.atlassian.net/browse/SONAR-18275?jql=project%20%3D%2010139%20AND%20fixVersion%20%3D%2013931">LTS Bug Fixes</a>.</p>2022-08-02T15:00:00+02:002022-08-02T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2022-08-02:/sonarqubetm-updated-to-899-lts.html

<p>SonarQube^TM has been updated to 8.9.9 LTS !</p> <p>With this version <a href="https://www.sonarqube.org/sonarqube-8-9-lts/">new features</a> are available, see <a href="https://docs.sonarqube.org/latest/setup/lts-to-lts-upgrade-notes/">LTS Release Upgrade Notes</a>.</p> <p><a href="https://jira-legacy-sonarsource.valiantys.net/secure/ReleaseNote.jspa?projectId=10930&amp;version=16710">LTS Bug Fixes</a>.</p> <p>Hints/Changes:</p> <ul> <li>all official plugins related to languages, Git/SVN support, and LDAP/GitHub/SAML authentication are now built into SonarQube^TM itself</li> <li>see the …</li></ul>

<p>SonarQube^TM has been updated to 8.9.9 LTS !</p> <p>With this version <a href="https://www.sonarqube.org/sonarqube-8-9-lts/">new features</a> are available, see <a href="https://docs.sonarqube.org/latest/setup/lts-to-lts-upgrade-notes/">LTS Release Upgrade Notes</a>.</p> <p><a href="https://jira-legacy-sonarsource.valiantys.net/secure/ReleaseNote.jspa?projectId=10930&amp;version=16710">LTS Bug Fixes</a>.</p> <p>Hints/Changes:</p> <ul> <li>all official plugins related to languages, Git/SVN support, and LDAP/GitHub/SAML authentication are now built into SonarQube^TM itself</li> <li>see the up-to-date list of <a href="https://sonarqube.inria.fr/pages/installed-plugins.html">manually installed plugins</a></li> <li>use the new parameter <a href="https://github.com/SonarOpenCommunity/sonar-cxx/wiki/sonar.cxx.file.suffixes">sonar.cxx.file.suffixes</a> to set the file extension to consider for your C or C++ files</li> <li>use sonar.cxx parameters not sonar.c anymore, i.e. analyze your C code as CXX source files</li> <li>sonar.cxx.gcc.charset becomes sonar.cxx.gcc.encoding</li> <li>sonar.cxx.coverage.reportPath becomes sonar.cxx.cobertura.reportPaths</li> <li>all parameters reportPath become reportPaths (with an s !)</li> <li>use the parameter <a href="https://docs.sonarqube.org/8.9/branches/overview/">sonar.branch.name</a> to analyze different git references</li> <li><a href="https://docs.sonarqube.org/8.9/analysis/branch-pr-analysis-overview/">branch and PR analysis</a> with integration with github and gitlab are only available in commercial editions cf. "Merge and Pull Request analysis is available as part of Developer Edition and above. There is a <a href="https://github.com/mc1arke/sonarqube-community-branch-plugin">community plugin</a> which may allow us to manage these kind of features but it has not been tested for now.</li> </ul>2020-12-23T15:00:00+01:002020-12-23T15:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2020-12-23:/sonarqubetm-updated-to-795-lts.html

<p>SonarQube^TM has been updated to 7.9.5 LTS !</p> <p>With this version <a href="https://www.sonarqube.org/sonarqube-7-9-lts/">new features</a> are available, such as support for <a href="https://github.com/mc1arke/sonarqube-community-branch-plugin">branch</a>. Stay tuned !</p> <p><a href="https://jira.sonarsource.com/projects/SONAR/versions/16486">LTS Bug Fixes</a>.</p> <p>Hints:</p> <ul> <li>parameter <strong>sonar.language</strong> is deprecated, please stop use it and prefer <a href="https://docs.sonarqube.org/latest/project-administration/narrowing-the-focus/">narrowing the focus</a></li> <li>some language patterns may be updated, see for …</li></ul>

<p>SonarQube^TM has been updated to 7.9.5 LTS !</p> <p>With this version <a href="https://www.sonarqube.org/sonarqube-7-9-lts/">new features</a> are available, such as support for <a href="https://github.com/mc1arke/sonarqube-community-branch-plugin">branch</a>. Stay tuned !</p> <p><a href="https://jira.sonarsource.com/projects/SONAR/versions/16486">LTS Bug Fixes</a>.</p> <p>Hints:</p> <ul> <li>parameter <strong>sonar.language</strong> is deprecated, please stop use it and prefer <a href="https://docs.sonarqube.org/latest/project-administration/narrowing-the-focus/">narrowing the focus</a></li> <li>some language patterns may be updated, see for example <code>sonar.lang.patterns.c++=**/*.cpp,**/*.hpp</code></li> <li>see the up-to-date list of <a href="https://sonarqube.inria.fr/pages/installed-plugins.html">installed plugins</a></li> </ul>2020-12-22T15:00:00+01:002020-12-22T15:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2020-12-22:/sonarqubetm-maintenance.html

<p>The SonarQube^TM service is outdated. Indeed, the application version is currently 6.7 when the LTS is now 7.9. We plan to upgrade to SonarQube^TM 7.9.5 LTS on Wednesday, December the 23th. The service will possibly be disturbed all day long.</p> <p>In addition a database …</p>

<p>The SonarQube^TM service is outdated. Indeed, the application version is currently 6.7 when the LTS is now 7.9. We plan to upgrade to SonarQube^TM 7.9.5 LTS on Wednesday, December the 23th. The service will possibly be disturbed all day long.</p> <p>In addition a database cleanup will be done: * User's accounts that are not anymore in the iLdap database will be deleted. * Projects with a last_analysis before the 2019-12-31 will be deleted (suppose to be dead projects).</p> <p>Please contact the support (helpdesk.inria.fr -&gt; IT request, service, for research, sonarqube) if any problem occurs.</p>2020-08-04T15:00:00+02:002020-08-04T15:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2020-08-04:/sonarqubetm-statistics.html

<p>Some figures about SonarQube^TM (2020-08-04)</p> <ul> <li>Context : project's entries in the SonarQube^TM database with a last_analysis before 2018-12-31 have been deleted</li> <li>245 projects, 171 users account (90 referenced in at least a project)</li> <li>Projects by last analysis date: 25% &lt; 100 days, 100 days &lt; 18% &lt; 200 days 57% &gt; 200 days …</li></ul>

<p>Some figures about SonarQube^TM (2020-08-04)</p> <ul> <li>Context : project's entries in the SonarQube^TM database with a last_analysis before 2018-12-31 have been deleted</li> <li>245 projects, 171 users account (90 referenced in at least a project)</li> <li>Projects by last analysis date: 25% &lt; 100 days, 100 days &lt; 18% &lt; 200 days 57% &gt; 200 days</li> </ul> <p>Projects by localization:</p> <ul> <li>CRI Sophia Antipolis - Méditerranée: 5%</li> <li>CRI Grenoble - Rhône-Alpes: 2%</li> <li>CRI de Paris: 5%</li> <li>CRI Saclay - Île-de-France: 30%</li> <li>CRI Bordeaux - Sud-Ouest: 44%</li> <li>CRI Nancy - Grand Est: 1%</li> <li>CRI Lille - Nord Europe: 0%</li> <li>CRI Rennes - Bretagne Atlantique: 6%</li> <li>National (multi centers): 7%</li> </ul> <p>Languages (nb lines):</p> <ul> <li>"c": 1978596</li> <li>"c++": 1538549</li> <li>"cs": 77087</li> <li>"css": 13247</li> <li>"f90": 92557</li> <li>"go": 33982</li> <li>"java": 510985</li> <li>"js": 21033</li> <li>"php": 140435</li> <li>"py": 864496</li> <li>"scala": 8074</li> <li>"ts": 2354</li> <li>"web": 33086</li> <li>"xml": 2649</li> <li>"yaml": 111222</li> </ul>2020-08-03T15:00:00+02:002020-08-03T15:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2020-08-03:/sonarqubetm-clean-up.html

<p>The SonarQube^TM database has been cleaned up</p> <ul> <li>User's accounts who are not anymore in the iLdap database have been deleted.</li> <li>Projects with a last_analysis before the 2018-12-31 have been deleted (suppose to be dead projects).</li> <li>Owners of projects with a non compliant name have been or will be contacted …</li></ul>

<p>The SonarQube^TM database has been cleaned up</p> <ul> <li>User's accounts who are not anymore in the iLdap database have been deleted.</li> <li>Projects with a last_analysis before the 2018-12-31 have been deleted (suppose to be dead projects).</li> <li>Owners of projects with a non compliant name have been or will be contacted to modify the name with respect to the defined rules.</li> </ul> <p>Please contact the SonarQube^TM support (helpdesk.inria.fr) if any problem occurs.</p>2019-10-03T10:00:00+02:002019-10-03T10:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2019-10-03:/sonarqubetm-training-session-in-bordeaux.html

<p>Program :</p> <h2>Jeudi 3 octobre 2019 après-midi :</h2> <ul> <li>Installation sonar-scanner, fichiers hello_world.py + sonar-project.properties pour tester bonne installation</li> <li>analyse statique en local avec le code jouet (heat par exemple)</li> <li>installer les différents outils analyse statique : c/c++ et python</li> <li>puis lancer les analyses</li> <li>puis ajouter les bonnes propriétés pour intégration dans …</li></ul>

<p>Program :</p> <h2>Jeudi 3 octobre 2019 après-midi :</h2> <ul> <li>Installation sonar-scanner, fichiers hello_world.py + sonar-project.properties pour tester bonne installation</li> <li>analyse statique en local avec le code jouet (heat par exemple)</li> <li>installer les différents outils analyse statique : c/c++ et python</li> <li>puis lancer les analyses</li> <li>puis ajouter les bonnes propriétés pour intégration dans SonarQube^TM : vérifier présence nouveaux bugs</li> <li>tester alternative coverity</li> </ul> <h2>Vendredi 4 octobre 2019 matin :</h2> <ul> <li>présenter les différentes vues et métriques</li> <li>montrer différents bugs et code smells qui reviennent souvent</li> <li>les trier (confirm/false positive/won’t fix), filtrer, trouver l’origine</li> <li>les corriger</li> <li>ou montrer comment les ignorer</li> <li>via interface</li> <li>via properties</li> <li>via l’outil amont</li> <li>voir d’adapter les règles du Quality Profile (exemple copyright, convention de nommage)</li> <li>discuter Quality Profile</li> <li>discuter Quality Gate</li> <li>notification email</li> <li>badges</li> </ul>2019-06-20T10:00:00+02:002019-06-20T10:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2019-06-20:/sonarqubetm-service-migrates-from-bordeaux-to-inria-national.html

<p>SonarQube^TM becomes a national service and the server's urls changes.</p> <ul> <li>official webpage <a href="https://sonarqube.bordeaux.inria.fr/">https://sonarqube.bordeaux.inria.fr/</a> becomes <a href="https://sonarqube.inria.fr/">https://sonarqube.inria.fr/</a></li> <li>the SonarQube^TM server <a href="https://sonarqube.bordeaux.inria.fr/sonarqube">https://sonarqube.bordeaux.inria.fr/sonarqube</a> becomes <a href="https://sonarqube.inria.fr/sonarqube">https://sonarqube.inria.fr/sonarqube</a></li> </ul> <p>The database has been transfered so that any data related to …</p>

<p>SonarQube^TM becomes a national service and the server's urls changes.</p> <ul> <li>official webpage <a href="https://sonarqube.bordeaux.inria.fr/">https://sonarqube.bordeaux.inria.fr/</a> becomes <a href="https://sonarqube.inria.fr/">https://sonarqube.inria.fr/</a></li> <li>the SonarQube^TM server <a href="https://sonarqube.bordeaux.inria.fr/sonarqube">https://sonarqube.bordeaux.inria.fr/sonarqube</a> becomes <a href="https://sonarqube.inria.fr/sonarqube">https://sonarqube.inria.fr/sonarqube</a></li> </ul> <p>The database has been transfered so that any data related to your account (tokens), your projects (members, rules administration), quality profiles, etc should be kept. As a result the existing tokens are working on the new server.</p> <p>From the users side only the url of the server has to be updated. Please replace <strong>https://sonarqube.bordeaux.inria.fr/sonarqube</strong> by <strong>https://sonarqube.inria.fr/sonarqube</strong> in your sonar-project.properties files.</p>2018-11-09T15:00:00+01:002018-11-09T15:00:00+01:00Hervé Mathieutag:sonarqube.inria.fr,2018-11-09:/sonarqubetm-in-november.html

<p>SonarQube^TM has been honored by a Inria <a href="https://intranet.inria.fr/en/News/2018-Inria-Awards-meet-the-winners">Award</a>.</p> <p>By November the 9Th (2018) SonarQube^TM has reached 85 user accounts and 62 projects.</p> <p>During the month of November (2018), we will activate the clean up process. That means cleaning up the user accounts (typically removing user accounts for people …</p>

<p>SonarQube^TM has been honored by a Inria <a href="https://intranet.inria.fr/en/News/2018-Inria-Awards-meet-the-winners">Award</a>.</p> <p>By November the 9Th (2018) SonarQube^TM has reached 85 user accounts and 62 projects.</p> <p>During the month of November (2018), we will activate the clean up process. That means cleaning up the user accounts (typically removing user accounts for people who are not at Inria any more), and cleaning up the project entries, by removing project entries in SonarQube^TM for projects whose name is not compliant with the <a href="https://sonarqube.inria.fr/pages/documentation.html#orgda0f182">rule team_name:code_name:...</a> or projects entries which did not receive any input for the last 12 months. Just remember that no code will be lost after the clean up process. Only the tag history will be lost.</p> <p>Please contact the support team if any trouble</p> <p>For that, an entry in the <a href="https://helpdesk.inria.fr/categories/78/show">helpdesk.inria.fr</a> has been added. Or by email at sed-sonarqube.helpdesk-prc@helpdesk.inria.fr</p>2018-08-31T15:00:00+02:002018-08-31T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2018-08-31:/sonarqubetm-updated-to-675-lts.html<p>SonarQube^TM has been updated to 6.7.5 LTS !</p> <p>Please read the <a href="https://jira.sonarsource.com/browse/SONAR/fixforversion/14467/?selectedTab=com.atlassian.jira.plugins.jira-development-integration-plugin:release-report-tabpanel">release note</a> for more information.</p>2018-07-03T00:00:00+02:002018-07-03T00:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2018-07-03:/sonarqubetm-interruption-of-service-in-august.html<p>(plumbing) work is scheduled beginning of August in the Bordeaux Sud Ouest data-center. Consequently, the SonarQube^TM platform will be unavailable during period 2-5 August 2018.</p>2018-06-08T15:00:00+02:002018-06-08T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2018-06-08:/sonarqubetm-updated-to-674-lts.html<p>SonarQube^TM has been updated to 6.7.4 LTS !</p> <p>Please read the <a href="https://jira.sonarsource.com/browse/SONAR/fixforversion/14377/?selectedTab=com.atlassian.jira.plugins.jira-development-integration-plugin:release-report-tabpanel">release note</a> for more information.</p> <p>New plugins installed : * <a href="https://github.com/SonarQubeCommunity/sonar-lua">Lua</a> * <a href="https://softvis3d.com/#/">SoftVis3D Sonar plugin</a> * <a href="https://docs.sonarqube.org/display/PLUG/SonarGo">SonarGo</a> * <a href="https://github.com/QualInsight/qualinsight-plugins-sonarqube-badges/">SVG badges</a></p>2018-06-01T00:00:00+02:002018-06-01T00:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2018-06-01:/still-growing-up.html<p>SonarQube^TM has reached 66 users and 45 projects.</p>2018-03-27T15:00:00+02:002018-03-27T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2018-03-27:/sonarqubetm-updated-to-672-lts.html<p>SonarQube^TM has been updated to 6.7.2 LTS !</p> <p>Please read the <a href="https://jira.sonarsource.com/browse/SONAR/fixforversion/14191/?selectedTab=com.atlassian.jira.plugins.jira-development-integration-plugin:release-report-tabpanel">release note</a> for more information.</p>2018-03-14T11:00:00+01:002018-03-14T11:00:00+01:00Hervé Mathieutag:sonarqube.inria.fr,2018-03-14:/a-new-web-entry-point.html<p>A new web entry point has been set in front of the SonarQube^TM instance. This provides a direct access to the SonarQube^TM instance, to the user documentation, the support link. It should implement a FAQ in the future.</p>2018-03-14T10:00:00+01:002018-03-14T10:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2018-03-14:/new-sonarqubetm-671-lts-is-available.html

<p>New SonarQube^TM 6.7.1 LTS is available !</p> <p>This new instance allows Inria's members to authenticate through their iLDAP login/password.</p> <p>External collaborators should be introduced by an Inria members to get an account. To do so please send an email to the <a href="mailto:sed-sonarqube.helpdesk-prc@helpdesk.inria.fr">support</a>.</p> <h1>Installed plugins</h1> <p>LDAP, Mercurial, SonarPython …</p>

<p>New SonarQube^TM 6.7.1 LTS is available !</p> <p>This new instance allows Inria's members to authenticate through their iLDAP login/password.</p> <p>External collaborators should be introduced by an Inria members to get an account. To do so please send an email to the <a href="mailto:sed-sonarqube.helpdesk-prc@helpdesk.inria.fr">support</a>.</p> <h1>Installed plugins</h1> <p>LDAP, Mercurial, SonarPython, SCM Git, SCM SVN, and the <a href="https://github.com/SonarOpenCommunity/sonar-cxx/">C++ Community plugin</a>.</p> <p>To get more plugins please contact the <a href="mailto:sed-sonarqube.helpdesk-prc@helpdesk.inria.fr">support</a>.</p>