This plugin is designed to run SonarQube scans and handle the results and convert it to JUnit Format. It's written in Go and check the report results for status OK.
- Sonar CLI downgraded from 6.0.0.4432 to 5.0.1.3006
- Execute SonarQube scans and handle the results
- Generate JUnit reports based on the scan results
- Quality Gate status reporting + Metrics
- Skip Scan and only check for quality Gate Status of a specific analysisId or last analysis
- Waiting for Analysis and QualityGate nows skip the wait if set to false - thanks @kangguru
- Added SONAR_SCANNER_OPTS as param, so it transform into this env var during execution for Sonar JVM params - check for the param detail section below
Obs: USe branch and pr_key params for accuracy results matches when skiping the scan
- step:
type: Plugin
name: "Check Sonar"
identifier: run_sonar
spec:
connectorRef: account.DockerHubDiego
image: plugins/sonarqube-scanner:v2.4.1
reports:
type: JUnit
spec:
paths:
- "sonarResults.xml"
privileged: false
settings:
sonar_host: http://34.100.11.50
sonar_token: 60878847cea1a31d817f0deee3daa7868c431433
sources: "."
binaries: "."
sonar_name: sonarqube-scanner
sonar_key: sonarqube-scanner
type: Plugin
spec:
connectorRef: <+input>
image: plugins/sonarqube-scanner:v2.4.1
reports:
type: JUnit
spec:
paths:
- "sonarResults.xml"
settings:
sonar_key: <+input>
sonar_name: <+input>
sonar_host: <+input>
sonar_token: <+input>
build_number: <+input>
branch: <+codebase.branch>
timeout: <+input>
sources: .
inclusions: <+input>
exclusions: <+input>
level: <+input>
showprofiling: <+input>.allowedValues("true","false"
branchanalysis: <+input>.allowedValues("true","false")
usingproperties: <+input>.allowedValues("true","false")
binaries: <+input>
sonar_qualitygate: OK
sonar_quality_enabled: <+input>.allowedValues("true","false")
sonar_qualitygate_timeout: <+input>
artifact_file: <+input>
javascript_icov_reportpath: <+input>
java_coverage_plugin: <+input>
jacoco_report_path: <+input>
- step:
type: Plugin
name: "Check Sonar Quality Gate"
identifier: check_sonar
spec:
connectorRef: account.DockerHubDiego
image: plugins/sonarqube-scanner:v2.4.1
reports:
type: JUnit
spec:
paths:
- "sonarResults.xml"
privileged: false
settings:
sonar_host: https://sonarcloud.io
sonar_token: 66778345yourToken817f0deee3daa7868c431433
sonar_name: sonar-project-name
sonar_key: sonar-project-key
skip_scan: true
kind: pipeline
name: default
steps:
- name: perform-code-analysis
image: plugins/sonarqube-scanner:v2.4.1
settings:
sonar_host: http://34.100.11.50
sonar_token:
from_secret: sonar_token
sources: .
binaries: .
sonar_name: sonarqube-scanner
sonar_key: sonarqube-scanner
key
: The project key in SonarQube.- Example:
"key": "your-project-key"
- Example:
name
: The project name in SonarQube.- Example:
"name": "your-project-name"
- Example:
host
: The URL of the SonarQube server.- Example:
"host": "https://sonarqube.example.com"
- Example:
token
: The token for authenticating with the SonarQube server.- Example:
"token": "your-sonarqube-token"
- Example:
ver
: The version of the project.- Example:
"ver": "1.0.0"
- Example:
workspace
: The workspace folder that will be passed to SonarQube CLI in case you are not cloning or scaning the /harness folder directly.- Example:
"workspace": "/harness/subfolder"
- Example:
branch
: The branch of the project. This parameter is used to specify the branch of your codebase that the results should be matched with. If you're working on multiple branches, it's important to specify the correct branch to ensure that you're looking at the correct set of results.- Example:
"branch": "master"
- Example:
timeout
: The timeout for the Sonar scanner.- Example:
"timeout": "300"
- Example:
sources
: The paths for the source directories, separated by commas.- Example:
"sources": "src"
- Example:
inclusions
: The files to be included in the analysis.- Example:
"inclusions": "*.go, *.java"
- Example:
exclusions
: The files to be excluded from the analysis.- Example:
"exclusions": "**/test/**/*.*,**/*.test.go"
- Example:
level
: The logging level.- Example:
"level": "INFO"
- Example:
showProfiling
: Enable profiling during analysis.- Example:
"showProfiling": "true"
- Example:
branchAnalysis
: Execute branch analysis.- Example:
"branchAnalysis": "true"
- Example:
usingProperties
: Usesonar-project.properties
.- Example:
"usingProperties": "true"
- Example:
binaries
: Java binaries.- Example:
"binaries": "/path/to/binaries"
- Example:
quality
: Quality Gate.- Example:
"quality": "OK"
- Example:
quality_gate_enabled
: Stop pipeline if Sonar quality gate conditions are not met.- Example:
"quality_gate_enabled": "true"
- Example:
qualitygate_timeout
: Number in seconds for timeout.- Example:
"qualitygate_timeout": "300"
- Example:
artifact_file
: Artifact file location that will be generated by the plugin. This file will include information of Docker images that are uploaded by the plugin.- Example:
"artifact_file": "artifact.json"
- Example:
output-file
: Output file location that will be generated by the plugin. This file will include information that is exported by the plugin.- Example:
"output-file": "/path/to/output/file"
- Example:
javascript_icov_reportPath
: Sonar JavaScript Icov Report Path parameter.- Example:
"javascript_icov_reportPath": "/path/to/icov/report"
- Example:
java_coverage_plugin
: Sonar Java Plugin parameter.- Example:
"java_coverage_plugin": "jacoco"
- Example:
jacoco_report_path
: Sonar Jacoco Report Path parameter.- Example:
"jacoco_report_path": "/path/to/jacoco/report"
- Example:
ssl_keystore_pwd
: Java Keystore Password.- Example:
"ssl_keystore_pwd": "your-keystore-password"
- Example:
cacerts_location
: Java Truststore Location (cacerts).- Example:
"cacerts_location": "/path/to/cacerts"
- Example:
junit_reportpaths
: JUnit Report Paths.- Example:
"junit_reportpaths": "/path/to/junit/reports"
- Example:
source_encoding
: Source Encoding.- Example:
"source_encoding": "UTF-8"
- Example:
tests
: Sonar Tests.- Example:
"tests": "/path/to/tests"
- Example:
java_test
: Java Test.- Example:
"java_test": "/path/to/java/test"
- Example:
pr_key
: Pull Request Key.- Example:
"pr_key": "123"
- Example:
pr_branch
: PR Branch.- Example:
"pr_branch": "your-pr-branch"
- Example:
pr_base
: PR Base.- Example:
"pr_base": "your-pr-base"
- Example:
coverage_exclusion
: Sonar coverage exclusions.- Example:
"coverage_exclusion": "**/test/**/*.*,**/*.test.go"
- Example:
java_source
: Sonar Java source.- Example:
"java_source": "1.8"
- Example:
java_libraries
: Sonar Java libraries.- Example:
"java_libraries": "/path/to/libraries"
- Example:
surefire_reportsPath
: Sonar surefire reportsPath.- Example:
"surefire_reportsPath": "/path/to/surefire/reports"
- Example:
typescript_lcov_reportPaths
: Sonar TypeScript lcov reportPaths.- Example:
"typescript_lcov_reportPaths": "/path/to/typescript/lcov/reports"
- Example:
verbose
: Sonar verbose.- Example:
"verbose": "true"
- Example:
custom_jvm_params
: JVM parameters. Use comma for multiple parameters.- Example:
"custom_jvm_params": "-Dsonar.java.source='value_you_want'"
- Example:
taskid
: Sonar analysis taskId.- Example:
"taskid": "your-task-id"
- Example:
skip_scan
: Skip Sonar analysis scan - get last analysis automatically.- Example:
"skip_scan": true
- Example:
SONAR_SCANNER_OPTS
: pass any Sonar JVM param as env var during execution.- Example:
"SONAR_SCANNER_OPTS": "--add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED"
- Example:
Detail Informations/tutorials Parameteres: DOCS.md.
build go binary file:
GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -o sonarqube-scanner
build docker image
docker build -t plugins/sonarqube-scanner .
docker run --rm \
-e DRONE_REPO=test \
-e PLUGIN_SOURCES=. \
-e SONAR_HOST=http://localhost:9000 \
-e SONAR_TOKEN=60878847cea1a31d817f0deee3daa7868c431433 \
-e PLUGIN_SONAR_KEY=project-sonar \
-e PLUGIN_SONAR_NAME=project-sonar \
plugins/sonarqube-scanner