SonarQube analysis and SonarLint integration with Visual Studio 2019
ฝัง
- เผยแพร่เมื่อ 1 ต.ค. 2020
- This video contains details on how to configure SonarQube on local system and perform the scan for local solution. It also contains details on how to integrate SonarLint with Visual Studio. I have also covered how to scan code coverage in visual studio for community/professional edition.
Thank you for explaining the configurations and generating reports. This video is helpful.
Glad it was helpful! Please do subscribe to my channel.
Hi, Nice tutorial. Thanks for posting it. I'm trying to understand what SQ is actually scanning. My understanding is that it's the embedded source code, which is what goes into the compiler, not what is generated by the compiler.
Great Explanation,thanks for the Info
Flawlessly descriptions...
Thank you..
Thank you very much, nice explanation.
Than you for the comment, if the content helps you do subscribe to my channel.
I ran the sonar test-specific command. I had one test case, it passed but the coverage file didn't generate.
Thank you so much for your great explanation. It was really good. I have a question, for test project configuration, you have configured opencover.xml file right, can we do the same via commands?
Thank you for the comment.
Below page contains the commands you can use for setting up the open cover reports path:
docs.sonarqube.org/latest/analysis/coverage
@@thesoftwaredeveloper2307 Hi sir my unit test project does not show lines of code on sonarcube server what can be issue it also does not show code coverage for unit test project
Thanks a lot for this information
Thank you for the comment.
if the content helps you, please like, share and subscribe to my channel.
thank you for explanation 👍
Glad it was helpful!
awesome. It worked like charm for me
Thank you for the comment, glad it helped...
Do subscribe to the channel..
@@thesoftwaredeveloper2307 once changes are staged, the code coverage is 0%. I don't have admin access so "Project Setting" is hidden. How to counter part this?
@@maniraj1920 In case you are not able to access the admin portal, you can pass the path of generated coverage report path while executing the first command related to setting up the project in SonarQube. Please refer below post on how to pass the coverage report path:
community.sonarsource.com/t/coverage-test-data-generate-reports-for-c-vb-net/9871
Do let me know in case its not working.
Great!!!
Thank you! If the content helps you do subscribe to my channel.
Thank you so much, how I can excludes some projects from code coverage, or exclude all projects and include one project for the testing.
Sorry for delayed response, that can be done from project settings on sonar portal.
Please refer below link for same -- docs.sonarqube.org/latest/project-administration/narrowing-the-focus/
Very helpful
Thanks for the comment, if the content helps you please do subscribe to my channel.
Bro you are awesome. I will connect with you
Very good
Chouksey mam
Thank you..
Great Explanation, but where can i configure file exclusions(not on ui). if wanted to change in sonar-project.properties file and based on that i want my analysis scope defined
Sorry for delayed response, I have not tried this approach but try something like this:
sonar.exclusions=system/**, test/**
Let me know if this works, I will also try from my end to see if this works.
Thanks for you video, I am trying to intergrate sonarQube with angular 12 application, Sonar detect any username and password but not detection any accesskey(api key) if hardcoded value, is there any way to write rules for this case...
nicely explained.... can you make a video on Unit testing for web Api controllers.. it will be helpful. Thanks
Thanks for the comment, I will plan for the unit testing topics shortly.
@The Software Developer can u please suggest how to perform code analysis for the same by using jenkins freestyel job
Thanks for this beautiful video. Do you have a github repo for this sample project that you can share. Will really appreciate to get a practical hands on. Thanks in advance
When I run cmd I get error about sufficient rights to check license.
dotnet sonarscanner begin /k:"Test_Scan_1"
Generated an error:
The token you provided doesn't have sufficient rights to check license.
I should use:
dotnet sonarscanner begin /k:"Test_Scan_1" /d:sonar.login=
Token is generated from localhost:9000/account/security/
About Java version is not working as well sometimes with latest version of jdk. At moment jdk-11 and jdk-13 is good but not jdk-15.0.2.
Thanks for mentioning the solution related to token.
I was also facing issues with jdk latest version so used previous one, forgot to mention that point in recording.
Hi nice explaination, actually I wanted to fail build with sonar qube warning can please help me how to do it
Thanks for the video, I am using SonarQube Community Version and Visual Code(with Angular, TypeScript and JavaScript). I run the commands and get the result in SonarQube. But I have two issues. 1) The Coverage is always shown as 0.0%..... 2) The Hotspots Reviewed sometimes shows E and A. .. Can you please help me as what need to done or configure to solve these two issues?
Thanks for watching the video, I came across below article on integrating angular code coverage with sonarqube and similar steps I have followed in past:
medium.com/@learning.bikash/angular-code-coverage-with-sonarqube-d2283442080b
Let me know if you still face the issue.
@@thesoftwaredeveloper2307 Thanks for the article. I have almost all the necesary set up. But still I am facing the same issues. Please your help. May be I need to some additional settings in sonarqube and my code in VS Code.?
@@amiraliansari9887 Sorry for delayed response, I was in training for last week.
Please confirm if below steps works for you, these are the steps I have followed in my project:
First, we need to install sonar-scanner node package in the Angular application.
Use below command to install this sonar-scanner package:
npm install sonar-scanner - save-dev
Once the package is installed, create file named “sonar-project.properties” in project root directory and add below configurations in it:
sonar.host.url={IP}:9000/
sonar.login=admin
sonar.password=admin
sonar.projectKey=text-phrase-client
sonar.projectName=text-phrase-client
sonar.projectVersion=1.0
sonar.sourceEncoding=UTF-8
sonar.sources=src
sonar.exclusions=**/node_modules/**
sonar.tests=src
sonar.test.inclusions=**/*.spec.ts
sonar.typescript.lcov.reportPaths=coverage/lcov.info
Run below command in terminal to generate the code coverage file:
ng test - watch=false - code-coverage
New Folder named coverage will be created under project directory:
First, we need to add below script entry in package.json file:
"scripts": {
"sonar": "sonar-scanner"
}
Once done, run below command to perform the sonar scan:
npm run sonar
Hi sir my unit test project does not lines of code on sonarcube server what can be issue it also does not show code coverage for unit test project
Nice tutorial. Could you please help me how to get the source code for this project? i mean ProfileInfo source code C#. Thanks
What if sonarqube is maintanined by other team, how can I refresh the results in sonarqube? particulary the code coverage.
Every time you run the commands successfully the sonarqube portal will be updated with latest coverage info.
If you are running this in pipeline you will need to make sure you have service connection in place to communicate with sonarqube portal for uploading the scan results.
Does code build mandatory step in sonarqube, as I am facing issue with build via command prompt. Although it is getting succesfull build in VS2019. I am also getting MSBUILD : error MSB1008: Only one project can be specified.
Can you please help me with this?
Sorry for the delayed response, based on what I have seen so far this issue comes if there is any space in arguments. Please verify if the arguments you are passing to the command are in correct format.
hi.Will this worl for code written in c++.Not sure sonaqube is free for c++
Thank you for the comment. C++ support is not available with community edition of sonarqube, for that you will need to go with developer edition which is paid.
If the video helps you do share with others and subscribe to my channel to grow it further.
i did not get coverage-opencover.xml file on unit test project 15:19 here
SonarQube starts at 4:00
Nice video but still got I keep getting an error when I start the server "Error: Could not find or load main class org.tanukisoftware.wrapper.WrapperSimpleApp" I've tried to download multiple versions of jdk's but all give the same results any idea's
This may happen if the path for JAVA folder is not correct in wrapper.conf file, please make sure you have updated the wrapper.conf file with new path for JDK e.g. C:\Program Files\java\jdk-13\bin\java
Let me know if this works for you.
Great explanation. Can you help me to set up SonarQube for React.js project. It would be a great help.
I have seen the steps to follow for setup in below blog:
javascript.plainenglish.io/how-to-set-up-sonarqube-locally-on-a-react-typescript-project-ec02cd8e2626
Try the steps, and if it still wont work let me know.
If the content helps you do subscribe to my channel.
Showing error in SonarCube that not passed parameter more than 7 ,How do I get resolve.
If possible please share more details, not sure if you are getting this error in between the scan or its displayed in final scan result.
But SonarQube might show you this error in case your method depends on too many parameters, more than 7 parameters I think. You might need to fix the code to limit the number of parameters.
how do u do from remote server?
Sorry for delayed response, please refer below page for using remote server.
docs.sonarqube.org/latest/analysis/analysis-parameters/
You need to use sonar.host.url parameter while scanning the project.
If the content helps you, do subscribe to the channel.
thank you.where can I find source code
I have not uploaded the code yet, but will share soon.
I am getting Wrapper stopped
omitted files
Can you help me how to resolve above issues
Which version of Java you are using? It needs at least JAVA 11.. In case you are using OpenJDK then use below URL for downloading the latest version and then copy/paste the extracted JDK folder under java folder and then update the wrapper.conf file with new URL e.g. C:\Program Files\java\jdk-13\bin\java
OpenJDK URL - jdk.java.net/archive/
Let me know if this helps
Hi @@thesoftwaredeveloper2307 i am facing the same issue i have added openjdk path has suggested but same result please can you help me
@@KrishnaReddy-tj4rn Thank you for the comment, please check few points -
1. Before extracting the sonarqube zip file make sure you go to properties and unblock the file,
2. Go to run and copy/paste the complete path you used for OpenJDK and hit enter, it should invoke the exe properly.
3. One mistake I did while setting up for the first time, I forgot to remove '#' present before 'wrapper.java.command', make sure you remove the # sign.
4. Make sure you always run bat file in admin mode
Let me know if this solves the issue.
I will also suggest you to go through SonarCloud tutorial for integrating sonar scan in azure pipeline- th-cam.com/video/rjLqULrhuXI/w-d-xo.html
If you like the content do share with your colleagues and subscribe to my channel to grow it further.
how to test php code using sonarqube can you make a video.
SonarQube has good documentation on how to achieve it - docs.sonarqube.org/latest/analysis/languages/php/
You will need to install required plugin for same. Let me know if the documentation helps, if not I will try to do it from my end and will let you know the steps. Please do subscribe to my channel.
How to generate a report in PDF format??
As per my knowledge export to PDF option is only available with the Enterprise edition, the option is not available with the free version which I have used.
It is possible to export the report in PDF with the bitegarden report plugin for SonarQube www.bitegarden.com/sonarqube-report
Man - Your scanning command is incomplete
Any issues you are facing?
@@thesoftwaredeveloper2307
The sequence of executing commands is like:
Step 1: dotnet sonarscanner begin /k:"MyProject" /d:sonar.host.url="localhost:9000" /d:sonar.login="KEY"
Step 2: dotnet build
Step 3: dotnet sonarscanner end /d:sonar.login="KEY"
KEY has to be configured from SONAR portal while creating a new project setup and SONAR is autogenerating this commands for us. Also the mention of default login credentials to SONAR is also reqruied.
@@dhruval20 Thanks for pointing it out. As I was running all the setup locally that might be the reason I never needed to pass token, may be Force User Authentication setting was disabled so it worked fine but great that you have solution for that.
For default credentials I have mentioned it at 14:22 I think, as user - admin and pass-admin.
@@thesoftwaredeveloper2307 I am also trying on my local. And I also feels like it will be better to introduce the configuration of JDK. Latest version of JDK is not compatible with SONAR. It fails to start ES & JVM. Need to downgrade the JDK version and also need a configuration of JAVA_HOME