C++ example project manually scanned on SonarQube

It is very easy to manually analyze a C, C++ and Objective-C project with SonarQube:

1. Create a sonar-project.properties file to store your configuration

   1. Add a projectKey of your project

   2. Generate a unique token and set it as "sonar.login" (SONARQUBE_TOKEN in this example project)

   3. Set sonar.host.url to your SonarQube server URL

2. Download and unzip the Build Wrapper for Windows from {SonarQube URL}/static/cpp/build-wrapper-win-x86.zip

3. Add the Build Wrapper to your %PATH%

4. Download and unzip the SonarScanner for Windows

5. Add the bin directory of the SonarScanner to your %PATH%

6. Wrap your clean build command with the Build Wrapper. E.g.: build-wrapper-win-x86-64.exe --out-dir bw-output MSBuild.exe /t:Rebuild /nodeReuse:false

7. Run sonar-scanner specifying:

   1. -Dsonar.cfamily.compile-commands=bw-output/compile_commands.json if you are using SonarQube version 10.6 or later

   2. -Dsonar.cfamily.build-wrapper-output=bw-output if you are using SonarQube version 10.5 or earlier, as build-wrapper did not generate a compile_commands.json file before SonarQube 10.6

   Noting that bw-output is the directory passed to build wrapper as --out-dir

You can take a look at the sonar-project.properties and build-analyze.ps1 to see it in practice. Please be aware that the SonarQube server URL and the sonar.login are not completed in this example.

Documentation

• Documentation of the C, C++ and Objective-C plugin and its Build Wrapper

• Configuring C, C++ and Objective-C analysis cache

• Configuring multithreaded execution

Windows\MSBuild

A build of the code repository on Windows platform using MSBuild build system.

To build the code run:

msbuild sonar_scanner_example.vcxproj

Code Description

An example of a flawed C++ code. The code repository is meant to be compiled with different build systems using different CI pipelines on Linux, macOS, and Windows.

The code repository is forked into other repositories in this collection to add a specific build system, platform, and CI. The downstream repositories are analyzed either with SonarQube or SonarCloud.

You can find examples for:

• Linux

• macOS

• Windows

Using the following build systems:

• CMake

• GNU Autotools

• Xcode

• MSBuild

Running on the following CI services:

• Azure DevOps

• GitHub Actions

• Travis

• Jenkins

• GitLab CI

• BitBucket Pipelines

• Additionally, generic examples demonstrate integration with other CIs and manual-configuration examples should help you if you are running locally.

Configured for analysis on:

• SonarQube

• SonarCloud

You can find also a few examples demonstrating:

• The use of Compilation Database (compile_commands.json)

• Test coverage

See examples-structure.adoc for a description of the structure of this GitHub organization and the relations between its different repositories.