Elixir projects in SonarQube

b3k · July 31, 2018, 9:16am

Hi!

Has anyone integrated the elixir project in SonarQube?

I saw the https://github.com/arthepsy/sonar-elixir repo, but it did’t bring anything valuable to Sonar in case of Elixir.

gausby · July 31, 2018, 11:06am

What’s a sonar cube ?

Exadra37 · July 31, 2018, 11:36am

Well it seems that is a tool for Continuous Code Quality, first time I come across it…

TestAutomation85 · August 9, 2018, 8:03pm

@b3k What issues did you encounter using

PeterDavidCarter · August 11, 2018, 12:20pm

See business proposition Q7: why YOUR business needs SonarQube.

sashman · October 2, 2018, 9:12am

Any update on this?

https://github.com/peterquicken/sonar-elixir fork seems to have had some activity

b3k · November 19, 2018, 3:12pm

Thanks, I will check that fork

b3k · November 19, 2018, 3:14pm

It has only basic support (LoC, module counting), without any code rules like code smells etc, from my organization perspective its kind important thing.

waystilos · December 27, 2018, 3:24pm

Same here. It’s not even considered if there is no sonarqube support.

joaoevangelista · December 27, 2018, 9:02pm

Is not possible to integrate Credo with Sonar?

adrienmo · April 5, 2020, 9:04am

I’ve tried to make it work with some duct tape!

Here is the plugin:

https://github.com/adrienmo/sonar-elixir/releases/download/1.0/sonar-elixir-plugin-1.0-SNAPSHOT.jar

Which I just found out there and compiled, basically it just give you the ability to scan .ex and .exs files.

Then I extended elixir existing tools to create generic reports:

generic code coverage: I made a pull request that was accepted by the library: https://github.com/parroty/excoveralls, you can generate the report with: “mix excoveralls.xml”
generic issues: I made a plugin for credo https://github.com/adrienmo/credo_sonarqube
generic test execution: I made an ExUnit formatter: https://github.com/adrienmo/ex_unit_sonarqube

You then need to configure your:

sonar.externalIssuesReportPaths
sonar.coverageReportPaths
sonar.testExecutionReportPaths

accordingly.

Coverage and execution works fine, credo plugin need some work to classify correctly bug/codesmell/vulnerability and time effort (right now it reports everything as code smell with 90 minutes time resolution) but it works

Hope it helps!

AllanPinheiroDeLima · September 29, 2021, 3:05pm

Hi, I can’t run the generic issues script. Maybe i’m doing something wrong ?
I’ve installed the credo_sonarqube package, but, when I run mix credo --sonarqube-base-folder cover/ --sonarqube-file credo_sonarqube.json it fails with the message

** (credo) Unknown switch: --sonarqube-base-folder
** (credo) Unknown switch: --sonarqube-file

Was something I misconfigured ?

And I wish to help with further development of this plugin. Is there any collaboration guidelines I should use ?

AllanPinheiroDeLima · September 29, 2021, 3:37pm

I did just check out the issues tab and found out that I didn’t configured the credo plugins properly. Solved.
But having this on docs would be nice. I can create a pull request documenting this

griojas · February 17, 2022, 9:50am

Could you share the configuration you did? I am facing the same issues.

sergiotudela · March 4, 2022, 4:55pm

Here you can check the configuration Error calling credo with parameters · Issue #1 · adrienmo/credo_sonarqube · GitHub it’s basically credo configuration (enable credo sonar plugin)

csadewa · August 10, 2022, 3:17am

Thanks @adrienmo , i am able to integrate elixir to sonarqube recently with your help!
It need a little bit of adjustment though on recent version of sonarqube (community edition, version 9.5):

need to adjust a bit output of coveralls.xml: sed -i 's/file path="\//file path="/g' cover/excoveralls.xml
need to adjust a bit output of credo_sonarqube: sed -i 's/startLine": null/startLine": 1/g' credo_sonarqube.json