amai2012/sonar-cxx

This repository contains a SonarQube plugin implementing C++ support.

SonarCloud (Technical Debt analysis)
DeepCode (real-time AI powered semantic code analysis)
Travis CI (Linux Build and Integration Tests)
AppVeyor CI (Windows Build and Deployment)		Download latest snapshot

SonarQube C++ plugin (Community)

SonarQube is an open platform to manage code quality. This plugin adds C++ support to SonarQube with the focus on integration of existing C++ tools.

This plugin is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version.

• parser supporting C89, C99, C11, C++03, C++11, C++14 and C++17 standards
  • Microsoft extensions: C++/CLI, Attributed ATL
  • GNU extensions
  • CUDA extensions
• Microsoft Windows and Linux for runtime environment

Sensors for static and dynamic code analysis:

• Cppcheck warnings support (http://cppcheck.sourceforge.net/)
• GCC/G++ warnings support (https://gcc.gnu.org/)
• Visual Studio warnings support (https://www.visualstudio.com/)
• Visual Studio Core Guideline Checker warnings support
• Clang Static Analyzer support (https://clang-analyzer.llvm.org/)
• Clang Tidy warnings support (http://clang.llvm.org/extra/clang-tidy/)
• Infer warnings support (https://fbinfer.com/)
• PC-Lint warnings support (http://www.gimpel.com/)
• RATS (https://github.com/andrew-d/rough-auditing-tool-for-security)
• Valgrind (http://valgrind.org/)
• Vera++ (https://bitbucket.org/verateam/vera/wiki/Home)
• Dr. Memory warnings support (http://drmemory.org/)

Test framework sensors for:

• XUnit file format
• Google Test file format
• Boost.Test file format
• CppUnit file format
• VSTest file format
• NUnit file format
• extensions over XSLT possible

Coverage sensors for:

• Visual Studio coverage reports
• Bullseye coverage reports (http://www.bullseye.com/)
• Cobertura coverage reports (http://cobertura.github.io/cobertura/)
  • gcov / gcovr coverage reports --xml https://gcovr.com/en/stable/guide.html
  • OpenCppCoverage --export_type=cobertura (https://github.com/OpenCppCoverage/OpenCppCoverage/)
• Testwell CTC++ coverage reports (https://www.verifysoft.com/en_ctcpp.html)

Simple to customize

• provide the ability to write custom rules
• custom rules by XPath checks possible
• custom rules by regular expression checks possible
• easy 3rd party tool integration with XML rule definitions and reports possible

Quickstart

1. Setup a SonarQube instance
2. Install the plugin (see Installation)
3. Run an analysis (see Running the analysis)

Resources

• Latest release
• Documentation
• Issue Tracker
• Continuous Integration Unix
• Continuous Integration Windows
• Sample project

Alternatives:

That's not the only choice when you are looking for C++ support in SonarQube there is also

• the commercial C/C++ plugin from SonarSource.
• the commercial C/C++ plugin from CppDepend
• the Coverity plugin
• the commercial PVS-Studio plugin

Choose whatever fits your needs.

Subscribe

Subscribe our release feed