Skip to main content

Tips and Tricks to configure Sonar Qube for .NET projects (C#)

Last week’s I had the opportunity to configure Sonar for a pretty big project. The application has over 3M lines of code and use different languages and technologies, from C# and Silverlight to JavaScript, C++ and embedded applications.
The main scope was to see if we can configure Sonar for this project. We decided at this step to exclude the embedded part of the application for Sonar. This was decided because of the time limitations. I’m almost sure that we can configure Sonar for embedded part without any kind of problems.
In the next part of the post I will present different issues that I encountered during Sonar configuration.
Where to store custom configuration?
Sonar gives you the possibility to specify different custom configuration at server level or on each project that is analyzed. Personally I prefer to have all the configuration (tools path location, unit tests projects pattern and so on) at project level – in sonar-project.properties file. For me is more easily to manage and if you have two different project that use two different tools, it will be very easily to configure them. Also, on Sonar server multiple person can have access and change the configuration (more teams on the same server). But at sonar-project.properties files, only the team that is working on the project will have access.
Where to put and store the plugins?
In Sonar, for each custom plugin you need to install or setup 3rd part applications or tools. First thing that you ask yourself where should I install and configure them.
I recommend to put all this tools in a folder called “Sonar-Plugins” or something similar. In this way if someone will need to check the plugins resources, change the configuration or configure a new Sonar server, it will be pretty easy to find all the resources and reconfigure them. Also, in this way it will be easier for you to manage them – you don’t need to search each tool in different folders.
What encoding should I set?
When you create the sonar-project.properties files don’t forget to set the encoding of source file to UTF-8. The default encoding is different from the one that is used in .NET projects.
sonar.sourceEncoding=UTF-8
How to exclude setup project?
If you have different project used to create the install package I recommend to use ssonar.exclusion  property. Using it, you can specify what folders to be excluded.
sonar.exclusions=Install/*
How to specify the project name that is displayed in the Sonar dashboard?
To be able to specify a custom name of the project, you need to use the following 3 properties available for this purpose:
sonar.projectKey=MyFooProject
sonar.projectVersion=1.0
sonar.projectName=MyFooProject
How to specify the SLN that needs to be used?
In the case you have the SLN project in different location that the sonar-project.properties or you have multiple SLN files under the same folder you can use the following property to specify exactly what SLN should be used:
sonar.dotnet.visualstudio.solution.file=MyFooProject.sln
Ho to specify the Silverlight installation directory?
If you installed Silverlight in a custom location or you have a 64 bits machines, that you will need to specify the location where Silverlight is installed. You can do as in the following example:
sonar.silverlight.3.mscorlib.location=c:/Program Files (x86)/Reference Assemblies/Microsoft/Framework/Silverlight/v3.0
sonar.silverlight.4.mscorlib.location=c:/Program Files (x86)/Reference Assemblies/Microsoft/Framework/Silverlight/v4.0
sonar.silverlight.5.mscorlib.location=c:/Program Files (x86)/Reference Assemblies/Microsoft/Framework/Silverlight/v5.0
How to specify what projects contains the unit tests?
In general Sonar will detect what are the projects that contains unit tests. In practice this is not happening. Because of this, you will need to specify the project pattern for projects that contains unit test. In the following example you all the projects that contains the ‘Test’ string will be processed as unit tests projects.
sonar.donet.visualstudio.testProjectPattern=*Test*
What is the configuration pattern when I need to configure different plugins?
All plugins has the same configurations (the general one). To access this properties, you need to use the following path:
sonar.[pluginName].[propertyName]=[value]
In the following example you can see an example that  specify the installation directory of a plugin.
sonar.stylecop.installDirectory=C:/Sonar/sonar-plugins/StyleCop
How to skip a specific plugin?
If you have a plugin that you don’t want to run you can set the mode of the plugin to ‘skip.
sonar.fxcop.mode=skip
How to specify the installation directory of a plugin?
The installdirectory property is you solution. Don’t forget to use ‘/’ and not ‘\’.
sonar.fxcop.installDirectory=c:/Program Files (x86)/Microsoft Fxcop 10.0

I hope that this tips helped you to configure Sonar.

Comments

  1. Thanks for the good tips. By the way, how do you specify skipProjectPattern for multiple patterns. For example, I want to skip any project that has word "contracts" or "entities" in its project name?

    ReplyDelete
  2. Can you have different stylecop settings for unit test and other project?

    ReplyDelete
    Replies
    1. By default is at project level. People usually forget this because they are using only a stylecop file. Take a look on http://blogs.msdn.com/b/sourceanalysis/archive/2008/05/25/managing-source-analysis-project-settings.aspx

      Delete

Post a Comment

Popular posts from this blog

Windows Docker Containers can make WIN32 API calls, use COM and ASP.NET WebForms

After the last post , I received two interesting questions related to Docker and Windows. People were interested if we do Win32 API calls from a Docker container and if there is support for COM. WIN32 Support To test calls to WIN32 API, let’s try to populate SYSTEM_INFO class. [StructLayout(LayoutKind.Sequential)] public struct SYSTEM_INFO { public uint dwOemId; public uint dwPageSize; public uint lpMinimumApplicationAddress; public uint lpMaximumApplicationAddress; public uint dwActiveProcessorMask; public uint dwNumberOfProcessors; public uint dwProcessorType; public uint dwAllocationGranularity; public uint dwProcessorLevel; public uint dwProcessorRevision; } ... [DllImport("kernel32")] static extern void GetSystemInfo(ref SYSTEM_INFO pSI); ... SYSTEM_INFO pSI = new SYSTEM_INFO(...

How to audit an Azure Cosmos DB

In this post, we will talk about how we can audit an Azure Cosmos DB database. Before jumping into the problem let us define the business requirement: As an Administrator I want to be able to audit all changes that were done to specific collection inside my Azure Cosmos DB. The requirement is simple, but can be a little tricky to implement fully. First of all when you are using Azure Cosmos DB or any other storage solution there are 99% odds that you’ll have more than one system that writes data to it. This means that you have or not have control on the systems that are doing any create/update/delete operations. Solution 1: Diagnostic Logs Cosmos DB allows us activate diagnostics logs and stream the output a storage account for achieving to other systems like Event Hub or Log Analytics. This would allow us to have information related to who, when, what, response code and how the access operation to our Cosmos DB was done. Beside this there is a field that specifies what was th...

Cloud Myths: Cloud is Cheaper (Pill 1 of 5 / Cloud Pills)

Cloud Myths: Cloud is Cheaper (Pill 1 of 5 / Cloud Pills) The idea that moving to the cloud reduces the costs is a common misconception. The cloud infrastructure provides flexibility, scalability, and better CAPEX, but it does not guarantee lower costs without proper optimisation and management of the cloud services and infrastructure. Idle and unused resources, overprovisioning, oversize databases, and unnecessary data transfer can increase running costs. The regional pricing mode, multi-cloud complexity, and cost variety add extra complexity to the cost function. Cloud adoption without a cost governance strategy can result in unexpected expenses. Improper usage, combined with a pay-as-you-go model, can result in a nightmare for business stakeholders who cannot track and manage the monthly costs. Cloud-native services such as AI services, managed databases, and analytics platforms are powerful, provide out-of-the-shelve capabilities, and increase business agility and innovation. H...