1. Lint (Static Code Analysis)

1.1. About SonarScanner

• SonnarScanner requires Java 8

• https://docs.sonarqube.org/display/SCAN/Analyzing+with+SonarQube+Scanner

• https://sonarsource.bintray.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-3.0.3.778-linux.zip

• https://docs.sonarqube.org/display/PLUG/Java+Plugin+and+Bytecode

• https://docs.sonarqube.org/display/SONAR/Analysis+Parameters

1.2. sonar.properties

• sonar.properties in your repository main folder

Code 1.11. Minimal Sonar Project Properties

sonar.projectKey=MyProject
sonar.projectName=MyProject
sonar.projectVersion=1.0

sonar.sources=src/main/java
sonar.java.binaries=target/classes
sonar.java.source=9

1.3. Run SonarQube server

version: '3'

networks:
    ecosystem:
        driver: bridge

services:
    sonar:
        image: sonarqube
        restart: always
        ports:
           - "8300:9000"
        networks:
            - ecosystem

1.4. Assignments

1.4.1. Statyczna analiza kodu za pomocą SonarScanner i SonarQube

1. Dla repozytorium https://github.com/AstroTech/ecosystem-example-java.git

2. Zacznij budować za pomocą mvn clean install

3. Wyniki upublicznij w SonarQube

4. Build uzależnij od wyniku Quality Gates (plugin Sonar Quality Gates)

5. Uruchom SonarQube za pomocą docker run -d --name sonarqube -p 9000:9000 sonarqube