Inria SonarQubeTM portalhttps://sonarqube.inria.fr/2023-03-16T15:00:00+01:00New plugin _ecoCode_ available2023-03-16T15:00:00+01:002023-03-16T15:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2023-03-16:/new-plugin-_ecocode_-available.html<p><a href="https://github.com/green-code-initiative/ecoCode">ecoCode</a> is a collective
project aiming to reduce environmental footprint of software at the code
level. The goal of the project is to provide a list of static code analyzers to
highlight code structures that may have a negative ecological impact: energy and
resources over-consumption, "fatware", shortening terminals' lifespan, etc …</p><p><a href="https://github.com/green-code-initiative/ecoCode">ecoCode</a> is a collective
project aiming to reduce environmental footprint of software at the code
level. The goal of the project is to provide a list of static code analyzers to
highlight code structures that may have a negative ecological impact: energy and
resources over-consumption, "fatware", shortening terminals' lifespan, etc.</p>
<p>It is available for languages Java, PHP and Python.</p>SonarQubeTM updated to 9.9 LTS !2023-03-03T15:00:00+01:002023-03-03T15:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2023-03-03:/sonarqubetm-updated-to-99-lts.html<p>SonarQube<sup>TM</sup> has been updated to 9.9 LTS !</p>
<p><a href="https://www.sonarsource.com/products/sonarqube/downloads/lts/9-9-lts/">LTS Release Upgrade Notes</a>.</p>
<p><a href="https://sonarsource.atlassian.net/browse/SONAR-18275?jql=project%20%3D%2010139%20AND%20fixVersion%20%3D%2013931">LTS Bug Fixes</a>.</p>SonarQubeTM updated to 8.9.9 LTS !2022-08-02T15:00:00+02:002022-08-02T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2022-08-02:/sonarqubetm-updated-to-899-lts.html<p>SonarQube<sup>TM</sup> has been updated to 8.9.9 LTS !</p>
<p>With this version <a href="https://www.sonarqube.org/sonarqube-8-9-lts/">new features</a> are available, see <a href="https://docs.sonarqube.org/latest/setup/lts-to-lts-upgrade-notes/">LTS Release Upgrade Notes</a>.</p>
<p><a href="https://jira-legacy-sonarsource.valiantys.net/secure/ReleaseNote.jspa?projectId=10930&version=16710">LTS Bug Fixes</a>.</p>
<p>Hints/Changes:</p>
<ul>
<li>all official plugins related to languages, Git/SVN support, and LDAP/GitHub/SAML authentication are now built into SonarQube<sup>TM</sup> itself</li>
<li>see the …</li></ul><p>SonarQube<sup>TM</sup> has been updated to 8.9.9 LTS !</p>
<p>With this version <a href="https://www.sonarqube.org/sonarqube-8-9-lts/">new features</a> are available, see <a href="https://docs.sonarqube.org/latest/setup/lts-to-lts-upgrade-notes/">LTS Release Upgrade Notes</a>.</p>
<p><a href="https://jira-legacy-sonarsource.valiantys.net/secure/ReleaseNote.jspa?projectId=10930&version=16710">LTS Bug Fixes</a>.</p>
<p>Hints/Changes:</p>
<ul>
<li>all official plugins related to languages, Git/SVN support, and LDAP/GitHub/SAML authentication are now built into SonarQube<sup>TM</sup> itself</li>
<li>see the up-to-date list of <a href="https://sonarqube.inria.fr/pages/installed-plugins.html">manually installed plugins</a></li>
<li>use the new parameter <a href="https://github.com/SonarOpenCommunity/sonar-cxx/wiki/sonar.cxx.file.suffixes">sonar.cxx.file.suffixes</a> to set the file extension to consider for your C or C++ files</li>
<li>use sonar.cxx parameters not sonar.c anymore, i.e. analyze your C code as CXX source files</li>
<li>sonar.cxx.gcc.charset becomes sonar.cxx.gcc.encoding</li>
<li>sonar.cxx.coverage.reportPath becomes sonar.cxx.cobertura.reportPaths</li>
<li>all parameters reportPath become reportPaths (with an s !)</li>
<li>use the parameter <a href="https://docs.sonarqube.org/8.9/branches/overview/">sonar.branch.name</a> to analyze different git references</li>
<li><a href="https://docs.sonarqube.org/8.9/analysis/branch-pr-analysis-overview/">branch and PR analysis</a>
with integration with github and gitlab are only available in commercial editions cf.
"Merge and Pull Request analysis is available as part of Developer Edition and above.
There is a <a href="https://github.com/mc1arke/sonarqube-community-branch-plugin">community plugin</a>
which may allow us to manage these kind of features but it has not been tested for now.</li>
</ul>SonarQubeTM updated to 7.9.5 LTS !2020-12-23T15:00:00+01:002020-12-23T15:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2020-12-23:/sonarqubetm-updated-to-795-lts.html<p>SonarQube<sup>TM</sup> has been updated to 7.9.5 LTS !</p>
<p>With this version <a href="https://www.sonarqube.org/sonarqube-7-9-lts/">new features</a> are available, such as support for <a href="https://github.com/mc1arke/sonarqube-community-branch-plugin">branch</a>.
Stay tuned !</p>
<p><a href="https://jira.sonarsource.com/projects/SONAR/versions/16486">LTS Bug Fixes</a>.</p>
<p>Hints:</p>
<ul>
<li>parameter <strong>sonar.language</strong> is deprecated, please stop use it and prefer <a href="https://docs.sonarqube.org/latest/project-administration/narrowing-the-focus/">narrowing the focus</a></li>
<li>some language patterns may be updated, see for …</li></ul><p>SonarQube<sup>TM</sup> has been updated to 7.9.5 LTS !</p>
<p>With this version <a href="https://www.sonarqube.org/sonarqube-7-9-lts/">new features</a> are available, such as support for <a href="https://github.com/mc1arke/sonarqube-community-branch-plugin">branch</a>.
Stay tuned !</p>
<p><a href="https://jira.sonarsource.com/projects/SONAR/versions/16486">LTS Bug Fixes</a>.</p>
<p>Hints:</p>
<ul>
<li>parameter <strong>sonar.language</strong> is deprecated, please stop use it and prefer <a href="https://docs.sonarqube.org/latest/project-administration/narrowing-the-focus/">narrowing the focus</a></li>
<li>some language patterns may be updated, see for example <code>sonar.lang.patterns.c++=**/*.cpp,**/*.hpp</code></li>
<li>see the up-to-date list of <a href="https://sonarqube.inria.fr/pages/installed-plugins.html">installed plugins</a></li>
</ul>SonarQubeTM : maintenance2020-12-22T15:00:00+01:002020-12-22T15:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2020-12-22:/sonarqubetm-maintenance.html<p>The SonarQube<sup>TM</sup> service is outdated.
Indeed, the application version is currently 6.7 when the LTS is now 7.9.
We plan to upgrade to SonarQube<sup>TM</sup> 7.9.5 LTS on Wednesday, December the 23th.
The service will possibly be disturbed all day long.</p>
<p>In addition a database …</p><p>The SonarQube<sup>TM</sup> service is outdated.
Indeed, the application version is currently 6.7 when the LTS is now 7.9.
We plan to upgrade to SonarQube<sup>TM</sup> 7.9.5 LTS on Wednesday, December the 23th.
The service will possibly be disturbed all day long.</p>
<p>In addition a database cleanup will be done:
* User's accounts that are not anymore in the iLdap database will be deleted.
* Projects with a last_analysis before the 2019-12-31 will be deleted (suppose to be dead projects).</p>
<p>Please contact the support (helpdesk.inria.fr -> IT request, service, for research, sonarqube) if any problem occurs.</p>SonarQubeTM : statistics2020-08-04T15:00:00+02:002020-08-04T15:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2020-08-04:/sonarqubetm-statistics.html<p>Some figures about SonarQube<sup>TM</sup> (2020-08-04)</p>
<ul>
<li>Context : project's entries in the SonarQube<sup>TM</sup> database with a last_analysis before 2018-12-31 have been deleted</li>
<li>245 projects, 171 users account (90 referenced in at least a project)</li>
<li>Projects by last analysis date: 25% < 100 days, 100 days < 18% < 200 days 57% > 200 …</li></ul><p>Some figures about SonarQube<sup>TM</sup> (2020-08-04)</p>
<ul>
<li>Context : project's entries in the SonarQube<sup>TM</sup> database with a last_analysis before 2018-12-31 have been deleted</li>
<li>245 projects, 171 users account (90 referenced in at least a project)</li>
<li>Projects by last analysis date: 25% < 100 days, 100 days < 18% < 200 days 57% > 200 days</li>
</ul>
<p>Projects by localization:</p>
<ul>
<li>CRI Sophia Antipolis - Méditerranée: 5%</li>
<li>CRI Grenoble - Rhône-Alpes: 2%</li>
<li>CRI de Paris: 5%</li>
<li>CRI Saclay - Île-de-France: 30%</li>
<li>CRI Bordeaux - Sud-Ouest: 44%</li>
<li>CRI Nancy - Grand Est: 1%</li>
<li>CRI Lille - Nord Europe: 0%</li>
<li>CRI Rennes - Bretagne Atlantique: 6%</li>
<li>National (multi centers): 7%</li>
</ul>
<p>Languages (nb lines):</p>
<ul>
<li>"c": 1978596</li>
<li>"c++": 1538549</li>
<li>"cs": 77087</li>
<li>"css": 13247</li>
<li>"f90": 92557</li>
<li>"go": 33982</li>
<li>"java": 510985</li>
<li>"js": 21033</li>
<li>"php": 140435</li>
<li>"py": 864496</li>
<li>"scala": 8074</li>
<li>"ts": 2354</li>
<li>"web": 33086</li>
<li>"xml": 2649</li>
<li>"yaml": 111222</li>
</ul>SonarQubeTM : clean up2020-08-03T15:00:00+02:002020-08-03T15:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2020-08-03:/sonarqubetm-clean-up.html<p>The SonarQube<sup>TM</sup> database has been cleaned up</p>
<ul>
<li>User's accounts who are not anymore in the iLdap database have been deleted.</li>
<li>Projects with a last_analysis before the 2018-12-31 have been deleted (suppose to be dead projects).</li>
<li>Owners of projects with a non compliant name have been or will be …</li></ul><p>The SonarQube<sup>TM</sup> database has been cleaned up</p>
<ul>
<li>User's accounts who are not anymore in the iLdap database have been deleted.</li>
<li>Projects with a last_analysis before the 2018-12-31 have been deleted (suppose to be dead projects).</li>
<li>Owners of projects with a non compliant name have been or will be contacted to modify the name with respect to the defined rules.</li>
</ul>
<p>Please contact the SonarQube<sup>TM</sup> support (helpdesk.inria.fr) if any problem occurs.</p>SonarQubeTM : training session in Bordeaux2019-10-03T10:00:00+02:002019-10-03T10:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2019-10-03:/sonarqubetm-training-session-in-bordeaux.html<p>Program :</p>
<h2>Jeudi 3 octobre 2019 après-midi :</h2>
<ul>
<li>Installation sonar-scanner, fichiers hello_world.py + sonar-project.properties pour tester bonne installation</li>
<li>analyse statique en local avec le code jouet (heat par exemple)</li>
<li>installer les différents outils analyse statique : c/c++ et python</li>
<li>puis lancer les analyses</li>
<li>puis ajouter les bonnes propriétés pour intégration …</li></ul><p>Program :</p>
<h2>Jeudi 3 octobre 2019 après-midi :</h2>
<ul>
<li>Installation sonar-scanner, fichiers hello_world.py + sonar-project.properties pour tester bonne installation</li>
<li>analyse statique en local avec le code jouet (heat par exemple)</li>
<li>installer les différents outils analyse statique : c/c++ et python</li>
<li>puis lancer les analyses</li>
<li>puis ajouter les bonnes propriétés pour intégration dans SonarQube<sup>TM</sup> : vérifier présence nouveaux bugs</li>
<li>tester alternative coverity</li>
</ul>
<h2>Vendredi 4 octobre 2019 matin :</h2>
<ul>
<li>présenter les différentes vues et métriques</li>
<li>montrer différents bugs et code smells qui reviennent souvent</li>
<li>les trier (confirm/false positive/won’t fix), filtrer, trouver l’origine</li>
<li>les corriger</li>
<li>ou montrer comment les ignorer</li>
<li>via interface</li>
<li>via properties</li>
<li>via l’outil amont</li>
<li>voir d’adapter les règles du Quality Profile (exemple copyright, convention de nommage)</li>
<li>discuter Quality Profile</li>
<li>discuter Quality Gate</li>
<li>notification email</li>
<li>badges</li>
</ul>SonarQubeTM service migrates from Bordeaux to Inria national2019-06-20T10:00:00+02:002019-06-20T10:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2019-06-20:/sonarqubetm-service-migrates-from-bordeaux-to-inria-national.html<p>SonarQube<sup>TM</sup> becomes a national service and the server's urls changes.</p>
<ul>
<li>official webpage <a href="https://sonarqube.bordeaux.inria.fr/">https://sonarqube.bordeaux.inria.fr/</a> becomes <a href="https://sonarqube.inria.fr/">https://sonarqube.inria.fr/</a></li>
<li>the SonarQube<sup>TM</sup> server <a href="https://sonarqube.bordeaux.inria.fr/sonarqube">https://sonarqube.bordeaux.inria.fr/sonarqube</a> becomes <a href="https://sonarqube.inria.fr/sonarqube">https://sonarqube.inria.fr/sonarqube</a></li>
</ul>
<p>The database has been transfered so that any data related to …</p><p>SonarQube<sup>TM</sup> becomes a national service and the server's urls changes.</p>
<ul>
<li>official webpage <a href="https://sonarqube.bordeaux.inria.fr/">https://sonarqube.bordeaux.inria.fr/</a> becomes <a href="https://sonarqube.inria.fr/">https://sonarqube.inria.fr/</a></li>
<li>the SonarQube<sup>TM</sup> server <a href="https://sonarqube.bordeaux.inria.fr/sonarqube">https://sonarqube.bordeaux.inria.fr/sonarqube</a> becomes <a href="https://sonarqube.inria.fr/sonarqube">https://sonarqube.inria.fr/sonarqube</a></li>
</ul>
<p>The database has been transfered so that any data related to your
account (tokens), your projects (members, rules administration),
quality profiles, etc should be kept. As a result the existing tokens
are working on the new server.</p>
<p>From the users side only the url of the server has to be updated.
Please replace <strong>https://sonarqube.bordeaux.inria.fr/sonarqube</strong> by
<strong>https://sonarqube.inria.fr/sonarqube</strong> in your
sonar-project.properties files.</p>SonarQubeTM in November2018-11-09T15:00:00+01:002018-11-09T15:00:00+01:00Hervé Mathieutag:sonarqube.inria.fr,2018-11-09:/sonarqubetm-in-november.html<p>SonarQube<sup>TM</sup> has been honored by a Inria <a href="https://intranet.inria.fr/en/News/2018-Inria-Awards-meet-the-winners">Award</a>.</p>
<p>By November the 9Th (2018) SonarQube<sup>TM</sup> has reached 85 user accounts and 62 projects.</p>
<p>During the month of November (2018), we will activate the clean up process. That means cleaning up the user accounts (typically removing user accounts for people …</p><p>SonarQube<sup>TM</sup> has been honored by a Inria <a href="https://intranet.inria.fr/en/News/2018-Inria-Awards-meet-the-winners">Award</a>.</p>
<p>By November the 9Th (2018) SonarQube<sup>TM</sup> has reached 85 user accounts and 62 projects.</p>
<p>During the month of November (2018), we will activate the clean up process. That means cleaning up the user accounts (typically removing user accounts for people who are not at Inria any more), and cleaning up the project entries, by removing project entries in SonarQube<sup>TM</sup> for projects whose name is not compliant with the <a href="https://sonarqube.inria.fr/pages/documentation.html#orgda0f182">rule team_name:code_name:...</a> or projects entries which did not receive any input for the last 12 months.
Just remember that no code will be lost after the clean up process. Only the tag history will be lost.</p>
<p>Please contact the support team if any trouble</p>
<p>For that, an entry in the <a href="https://helpdesk.inria.fr/categories/78/show">helpdesk.inria.fr</a> has been added.
Or by email at sed-sonarqube.helpdesk-prc@helpdesk.inria.fr</p>SonarQubeTM updated to 6.7.5 LTS !2018-08-31T15:00:00+02:002018-08-31T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2018-08-31:/sonarqubetm-updated-to-675-lts.html<p>SonarQube<sup>TM</sup> has been updated to 6.7.5 LTS !</p>
<p>Please read the <a href="https://jira.sonarsource.com/browse/SONAR/fixforversion/14467/?selectedTab=com.atlassian.jira.plugins.jira-development-integration-plugin:release-report-tabpanel">release note</a> for more information.</p>SonarQubeTM: interruption of service in august2018-07-03T00:00:00+02:002018-07-03T00:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2018-07-03:/sonarqubetm-interruption-of-service-in-august.html<p>(plumbing) work is scheduled beginning of August in the Bordeaux Sud Ouest data-center.
Consequently, the SonarQube<sup>TM</sup> platform will be unavailable during period 2-5 August 2018.</p>SonarQubeTM updated to 6.7.4 LTS !2018-06-08T15:00:00+02:002018-06-08T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2018-06-08:/sonarqubetm-updated-to-674-lts.html<p>SonarQube<sup>TM</sup> has been updated to 6.7.4 LTS !</p>
<p>Please read the <a href="https://jira.sonarsource.com/browse/SONAR/fixforversion/14377/?selectedTab=com.atlassian.jira.plugins.jira-development-integration-plugin:release-report-tabpanel">release note</a> for more information.</p>
<p>New plugins installed :
* <a href="https://github.com/SonarQubeCommunity/sonar-lua">Lua</a>
* <a href="https://softvis3d.com/#/">SoftVis3D Sonar plugin</a>
* <a href="https://docs.sonarqube.org/display/PLUG/SonarGo">SonarGo</a>
* <a href="https://github.com/QualInsight/qualinsight-plugins-sonarqube-badges/">SVG badges</a></p>still growing up2018-06-01T00:00:00+02:002018-06-01T00:00:00+02:00Hervé Mathieutag:sonarqube.inria.fr,2018-06-01:/still-growing-up.html<p>SonarQube<sup>TM</sup> has reached 66 users and 45 projects.</p>SonarQubeTM updated to 6.7.2 LTS !2018-03-27T15:00:00+02:002018-03-27T15:00:00+02:00Florent Pruvosttag:sonarqube.inria.fr,2018-03-27:/sonarqubetm-updated-to-672-lts.html<p>SonarQube<sup>TM</sup> has been updated to 6.7.2 LTS !</p>
<p>Please read the <a href="https://jira.sonarsource.com/browse/SONAR/fixforversion/14191/?selectedTab=com.atlassian.jira.plugins.jira-development-integration-plugin:release-report-tabpanel">release note</a> for more information.</p>A new web entry point2018-03-14T11:00:00+01:002018-03-14T11:00:00+01:00Hervé Mathieutag:sonarqube.inria.fr,2018-03-14:/a-new-web-entry-point.html<p>A new web entry point has been set in front of the SonarQube<sup>TM</sup> instance.
This provides a direct access to the SonarQube<sup>TM</sup> instance, to the user documentation, the support link.
It should implement a FAQ in the future.</p>New SonarQubeTM 6.7.1 LTS is available !2018-03-14T10:00:00+01:002018-03-14T10:00:00+01:00Florent Pruvosttag:sonarqube.inria.fr,2018-03-14:/new-sonarqubetm-671-lts-is-available.html<p>New SonarQube<sup>TM</sup> 6.7.1 LTS is available !</p>
<p>This new instance allows Inria's members to authenticate through their
iLDAP login/password.</p>
<p>External collaborators should be introduced by an Inria members to get
an account. To do so please send an email to the
<a href="mailto:sed-sonarqube.helpdesk-prc@helpdesk.inria.fr">support</a>.</p>
<h1>Installed plugins</h1>
<p>LDAP, Mercurial, SonarPython …</p><p>New SonarQube<sup>TM</sup> 6.7.1 LTS is available !</p>
<p>This new instance allows Inria's members to authenticate through their
iLDAP login/password.</p>
<p>External collaborators should be introduced by an Inria members to get
an account. To do so please send an email to the
<a href="mailto:sed-sonarqube.helpdesk-prc@helpdesk.inria.fr">support</a>.</p>
<h1>Installed plugins</h1>
<p>LDAP, Mercurial, SonarPython, SCM Git, SCM SVN, and the <a href="https://github.com/SonarOpenCommunity/sonar-cxx/">C++ Community
plugin</a>.</p>
<p>To get more plugins please contact the
<a href="mailto:sed-sonarqube.helpdesk-prc@helpdesk.inria.fr">support</a>.</p>