`
erichua
  • 浏览: 516405 次
  • 性别: Icon_minigender_2
  • 来自: 远方
社区版块
存档分类
最新评论

Java---Sonar二分钟安装

    博客分类:
  • JAVA
阅读更多

1.下载sonar安装版,解压;

2.bin\windows-x86-32\StartSonar.bat

3.mvn clean install sonar:sonar

4.Browse to http://localhost:9000, default login/password is admin/admin.

5.mvn org.codehaus.sonar:sonar-maven-plugin:1.8:sonar -Dsonar.skipInstall=true 安装插件

 

#--------------------------------------------------------
# To use an environment variable, use the following syntax :  ${env:NAME_OF_ENV_VARIABLE}
# For example :
#   sonar.jdbc.url: ${env:SONAR_JDBC_URL}
#---------------------------------------------------------


#---------------------------------------------------------
# WEB
#---------------------------------------------------------
# Listen host/port and context path (for example / or /sonar). Default values are 0.0.0.0:9000/ 
# ONLY IF STANDALONE MODE. NOT USED IF DEPLOYED AS A WAR.
sonar.web.host:                           0.0.0.0
sonar.web.port:                           9000
sonar.web.context:                        /sonar

# Apache mod_jk connector. Supported only in standalone mode. 
# Uncomment to activate AJP13 connector. 
#sonar.ajp13.port: 8009

#---------------------------------------------------------
# DATABASE
#---------------------------------------------------------

# Comment the 4 following lines to deactivate the default embedded database (used only for tests and demos)
#sonar.jdbc.url:                            jdbc:derby://localhost:1527/sonar;create=true
#sonar.jdbc.driverClassName:                org.apache.derby.jdbc.ClientDriver
#sonar.jdbc.validationQuery:                values(1)
# data directory, autodetected : /data if standalone application, /WEB-INF/classes/data if WAR deployement (exploded mode)
#sonar.embeddedDatabase.dataDir:

# MySql
# uncomment the 3 following lines to use MySQL
sonar.jdbc.url:                            jdbc:mysql://localhost:3306/sonar?useUnicode=true&characterEncoding=utf8
sonar.jdbc.driverClassName:                com.mysql.jdbc.Driver
sonar.jdbc.validationQuery:                select 1

# Oracle
# uncomment the 3 following lines to use Oracle
#sonar.jdbc.url:                            jdbc:oracle:thin:@localhost/XE
#sonar.jdbc.driverClassName:                oracle.jdbc.driver.OracleDriver
#sonar.jdbc.validationQuery:                select 1 from dual

# PostgreSQL
# uncomment the 3 following lines to use PostgreSQL
#sonar.jdbc.url:                            jdbc:postgresql://localhost/sonar
#sonar.jdbc.driverClassName:                org.postgresql.Driver
#sonar.jdbc.validationQuery:                select 1

# generic settings
sonar.jdbc.username:                       sonar
sonar.jdbc.password:                       sonar
sonar.jdbc.maxActive:                      10
sonar.jdbc.maxIdle:                        5
sonar.jdbc.minIdle:                        2
sonar.jdbc.maxWait:                        5000
sonar.jdbc.minEvictableIdleTimeMillis:     600000
sonar.jdbc.timeBetweenEvictionRunsMillis:  30000

# Transaction isolation level. Default driver setting is used by default.
# Values : 1 (TRANSACTION_READ_UNCOMMITED), 2 (TRANSACTION_READ_COMMITTED), 4 (TRANSACTION_REPEATABLE_READ), 8 (TRANSACTION_SERIALIZABLE)
#sonar.jdbc.defaultTransactionIsolation: 2


# When packaged in a WAR, JDBC datasource can be configured into the application server then registered to JNDI.
# In such a case Sonar uses this datasource to connect to database, else if binds itself its own datasource.
# Note : Jonas does not accept to bind subcontexts, so name should be something like 'jdbc-sonar', without slashes.
#sonar.jdbc.jndiName:                       jdbc/sonar


#---------------------------------------------------------
# EXTENSIONS
#---------------------------------------------------------
# Absolute path of coding rules extensions (custom rules that are not provided with tools like Checkstyle or PMD).
# This parameter is useful when Sonar is deployed as a WAR. It avoids from packaging the WAR file each time extensions JARs are updated.
# The directory contains subdirectories like checkstyle/ and pmd/
# Example :
# sonar.rules.extensionsPath:  /user/home/jdoe/sonar/extensions 

MVN

<!--
Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements.  See the NOTICE file
distributed with this work for additional information
regarding copyright ownership.  The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License.  You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied.  See the License for the
specific language governing permissions and limitations
under the License.
-->

<!--
 | This is the configuration file for Maven. It can be specified at two levels:
 |
 |  1. User Level. This settings.xml file provides configuration for a single user, 
 |                 and is normally provided in $HOME/.m2/settings.xml.
 |
 |                 NOTE: This location can be overridden with the system property:
 |
 |                 -Dorg.apache.maven.user-settings=/path/to/user/settings.xml
 |
 |  2. Global Level. This settings.xml file provides configuration for all maven
 |                 users on a machine (assuming they're all using the same maven
 |                 installation). It's normally provided in 
 |                 ${maven.home}/conf/settings.xml.
 |
 |                 NOTE: This location can be overridden with the system property:
 |
 |                 -Dorg.apache.maven.global-settings=/path/to/global/settings.xml
 |
 | The sections in this sample file are intended to give you a running start at
 | getting the most out of your Maven installation. Where appropriate, the default
 | values (values used when the setting is not specified) are provided.
 |
 |-->
<settings>
  <!-- localRepository
   | The path to the local repository maven will use to store artifacts.
   |
   | Default: ~/.m2/repository  -->
  <localRepository>D:/.m2/repository</localRepository>


  <!-- interactiveMode
   | This will determine whether maven prompts you when it needs input. If set to false,
   | maven will use a sensible default value, perhaps based on some other setting, for
   | the parameter in question.
   |
   | Default: true
  <interactiveMode>true</interactiveMode>
  -->

  <!-- offline
   | Determines whether maven should attempt to connect to the network when executing a build.
   | This will have an effect on artifact downloads, artifact deployment, and others.
   |
   | Default: false
  <offline>false</offline>
  -->

  <!-- proxies
   | This is a list of proxies which can be used on this machine to connect to the network.
   | Unless otherwise specified (by system property or command-line switch), the first proxy
   | specification in this list marked as active will be used.
   |-->
	<proxies>
		<!-- proxy
			| Specification for one proxy, to be used in connecting to the network.
			<nonProxyHosts>local.net,some.host.com</nonProxyHosts>
			|-->
			<proxy>
			<id>tnt</id>
			<active>true</active>
			<protocol>http</protocol>
			<username></username>
			<password></password>
			<host>10.168.0.7</host>
			<port>3128</port>
			
			</proxy>
		
	</proxies>

  <!-- servers
   | This is a list of authentication profiles, keyed by the server-id used within the system.
   | Authentication profiles can be used whenever maven must make a connection to a remote server.
   |-->
  <servers>
    <!-- server
     | Specifies the authentication information to use when connecting to a particular server, identified by
     | a unique name within the system (referred to by the 'id' attribute below).
     | 
     | NOTE: You should either specify username/password OR privateKey/passphrase, since these pairings are 
     |       used together.
     |
    <server>
      <id>deploymentRepo</id>
      <username>repouser</username>
      <password>repopwd</password>
    </server>
    -->
    
    <!-- Another sample, using keys to authenticate.
    <server>
      <id>siteServer</id>
      <privateKey>/path/to/private/key</privateKey>
      <passphrase>optional; leave empty if not used.</passphrase>
    </server>
    -->
  </servers>

  <!-- mirrors
   | This is a list of mirrors to be used in downloading artifacts from remote repositories.
   | 
   | It works like this: a POM may declare a repository to use in resolving certain artifacts.
   | However, this repository may have problems with heavy traffic at times, so people have mirrored
   | it to several places.
   |
   | That repository definition will have a unique id, so we can create a mirror reference for that
   | repository, to be used as an alternate download site. The mirror site will be the preferred 
   | server for that repository.
   |-->
  <mirrors>
    <!-- mirror
     | Specifies a repository mirror site to use instead of a given repository. The repository that
     | this mirror serves has an ID that matches the mirrorOf element of this mirror. IDs are used
     | for inheritance and direct lookup purposes, and must be unique across the set of mirrors.
     |
    <mirror>
      <id>mirrorId</id>
      <mirrorOf>repositoryId</mirrorOf>
      <name>Human Readable Name for this Mirror.</name>
      <url>http://my.repository.com/repo/path</url>
    </mirror>
     -->
  </mirrors>
  
  <!-- profiles
   | This is a list of profiles which can be activated in a variety of ways, and which can modify
   | the build process. Profiles provided in the settings.xml are intended to provide local machine-
   | specific paths and repository locations which allow the build to work in the local environment.
   |
   | For example, if you have an integration testing plugin - like cactus - that needs to know where
   | your Tomcat instance is installed, you can provide a variable here such that the variable is 
   | dereferenced during the build process to configure the cactus plugin.
   |
   | As noted above, profiles can be activated in a variety of ways. One way - the activeProfiles
   | section of this document (settings.xml) - will be discussed later. Another way essentially
   | relies on the detection of a system property, either matching a particular value for the property,
   | or merely testing its existence. Profiles can also be activated by JDK version prefix, where a 
   | value of '1.4' might activate a profile when the build is executed on a JDK version of '1.4.2_07'.
   | Finally, the list of active profiles can be specified directly from the command line.
   |
   | NOTE: For profiles defined in the settings.xml, you are restricted to specifying only artifact
   |       repositories, plugin repositories, and free-form properties to be used as configuration
   |       variables for plugins in the POM.
   |
   |-->
  <profiles>
    <!-- profile
     | Specifies a set of introductions to the build process, to be activated using one or more of the
     | mechanisms described above. For inheritance purposes, and to activate profiles via <activatedProfiles/>
     | or the command line, profiles have to have an ID that is unique.
     |
     | An encouraged best practice for profile identification is to use a consistent naming convention
     | for profiles, such as 'env-dev', 'env-test', 'env-production', 'user-jdcasey', 'user-brett', etc.
     | This will make it more intuitive to understand what the set of introduced profiles is attempting
     | to accomplish, particularly when you only have a list of profile id's for debug.
     |
     | This profile example uses the JDK version to trigger activation, and provides a JDK-specific repo.
    <profile>
      <id>jdk-1.4</id>

      <activation>
        <jdk>1.4</jdk>
      </activation>

      <repositories>
        <repository>
	  <id>jdk14</id>
	  <name>Repository for JDK 1.4 builds</name>
	  <url>http://www.myhost.com/maven/jdk14</url>
	  <layout>default</layout>
	  <snapshotPolicy>always</snapshotPolicy>
	</repository>
      </repositories>
    </profile>
    -->

    <!--
     | Here is another profile, activated by the system property 'target-env' with a value of 'dev',
     | which provides a specific path to the Tomcat instance. To use this, your plugin configuration
     | might hypothetically look like:
     |
     | ...
     | <plugin>
     |   <groupId>org.myco.myplugins</groupId>
     |   <artifactId>myplugin</artifactId>
     |   
     |   <configuration>
     |     <tomcatLocation>${tomcatPath}</tomcatLocation>
     |   </configuration>
     | </plugin>
     | ...
     |
     | NOTE: If you just wanted to inject this configuration whenever someone set 'target-env' to
     |       anything, you could just leave off the <value/> inside the activation-property.
     |
    <profile>
      <id>env-dev</id>

      <activation>
        <property>
	  <name>target-env</name>
	  <value>dev</value>
	</property>
      </activation>

      <properties>
        <tomcatPath>/path/to/tomcat/instance</tomcatPath>
      </properties>
    </profile>
    -->
     <profile>
            <id>sonar</id>
            <activation>
                <activeByDefault>true</activeByDefault>
            </activation>
            <properties>
                <!-- EXAMPLE FOR MYSQL -->
                <sonar.jdbc.url>
                  jdbc:mysql://localhost:3306/sonar?useUnicode=true&amp;characterEncoding=utf8
                </sonar.jdbc.url>
                <sonar.jdbc.driver>com.mysql.jdbc.Driver</sonar.jdbc.driver>
                <sonar.jdbc.username>sonar</sonar.jdbc.username>
                <sonar.jdbc.password>sonar</sonar.jdbc.password>

                <!-- SERVER ON A REMOTE HOST-->
                 <sonar.host.url>http://localhost:9000/sonar</sonar.host.url> 
            </properties>
        </profile>
  </profiles>

  <!-- activeProfiles
   | List of profiles that are active for all builds.
   |
  <activeProfiles>
    <activeProfile>alwaysActiveProfile</activeProfile>
    <activeProfile>anotherAlwaysActiveProfile</activeProfile>
  </activeProfiles>
  -->

    

</settings> 

 

 

收集数据

 maven项目

1。mvn clean install -Dtest=false -DfailIfNoTests=false

2。mvn sonar:sonar or mvn org.codehaus.sonar:sonar-maven-plugin:1.8:sonar

 

not maven项目

1.建一个pom.xml

<project xmlns="http://maven.apache.org/POM/4.0.0"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>
  <groupId>eric</groupId>
  <artifactId>mmsitem</artifactId>
  <name>mmsitem</name>
  <version>1</version>
  <build>
        <sourceDirectory>../src</sourceDirectory>
    <outputDirectory>../WebRoot/WEB-INF/classes</outputDirectory>
        <plugins>
           <plugin>
              <groupId>org.apache.maven.plugins</groupId>
              <artifactId>maven-compiler-plugin</artifactId>
              <configuration>
                  <source>1.5</source>
                  <target>1.5</target>
                  <excludes>
                      <exclude>**/*.*</exclude>
                  </excludes>
              </configuration>
           </plugin>
        </plugins>
  </build>
  <properties>
  	<sonar.dynamicAnalysis>false</sonar.dynamicAnalysis>
  </properties>
</project>

 2。mvn sonar:sonar or mvn org.codehaus.sonar:sonar-maven-plugin:1.8:sonar

0
0
分享到:
评论

相关推荐

    sonar-java-plugin-4.10.0.10260.jar

    sonar-java-plugin-4.10.0.10260.jar

    sonar-java-plugin-5.12.1.17771.rar

    该插件版本为5.12.1,内部包含两个核心组件:sonar-findbugs-plugin-3.11.1.jar和sonar-java-plugin-5.12.1.17771.jar。这两个组件是SonarQube进行Java代码安全检查的关键。 首先,sonar-findbugs-plugin是FindBugs...

    sonar-java-custom-rules.zip

    "sonar-java-custom-rules.zip" 是一个与SonarQube相关的压缩文件,它专注于Java代码的质量检测。SonarQube是一款开源平台,用于持续集成和静态代码分析,旨在提升软件开发过程中的代码质量和可维护性。这个压缩包...

    sonar-scanner连接sonarquebe7的sonar.java.binaries问题的解决方案

    2. 删除当前版本的Java插件文件(例如,上述示例中的`sonar-java-plugin-5.01.jar`)。 3. 下载4.10版本的Java插件,并将其替换到插件目录。 4. 重启SonarQube服务,让更改生效。 当然,更长期的解决方案应该是更新...

    sonar-|10n-zh-plugin-1.6.jar(sonar中文包)

    2. 安装:将下载的jar文件复制到SonarQube服务器的`extensions/plugins`目录下。 3. 重启:停止SonarQube服务,然后重新启动。这样插件会被自动加载并生效。 4. 验证:登录到SonarQube的Web界面,如果设置正确,你...

    sonarqube插件包

    sonar-jacoco-plugin-1.0.2.475.jar sonar-java-plugin-5.14.0.18788.jar sonar-javascript-plugin-5.2.1.7778.jar sonar-kotlin-plugin-1.5.0.315.jar sonar-l10n-zh-plugin-1.29.jar sonar-ldap-plugin-2.2.0.608....

    sonar-java-plugin-6.2.0.21135-javadoc.jar

    最新的java SonarQube 代码格式检测工具。

    sonar-java-api-3.1.1.zip

    《SonarJava API 3.1.1与Annovention:深入开源注解处理》 在软件开发领域,代码质量的把控是至关重要的。SonarJava API 3.1.1是一个专注于Java语言的静态代码分析工具,它提供了一种强大的方式来检测代码中的潜在...

    sonar-scanner-cli-4.2.0.1873-linux.zip

    2. **插件**:SonarScanner支持多种编程语言的插件,如Java、Python、C#等。这些插件提供了特定语言的规则库,用于识别各种质量问题。 3. **配置文件**:通常包括`sonar-project.properties`,在这个文件中,用户...

    sonar-pmd-plugin-3.2.1.jar

    阿里巴巴java开发规范集成sonar扫描

    sonar-java插件源码

    2. **报告生成**:SonarJava插件会将分析结果转换为SonarQube能理解的格式,生成质量报告。这个过程涉及到问题的定位(行号、列号)、严重程度(bug、violation、info)和修复建议。 3. **配置与扩展**:源码允许...

    sonar-pdfreport-en-plugin-4.0.1.jar

    sonarqube PDF导出插件英文版,适用SonarQube版本 : 5.5--9.9

    sonar-scanner-2.5.zip

    2. **多种语言支持**:支持Java、Python、JavaScript等多种编程语言的代码分析,满足不同项目的需要。 3. **规则库**:内置丰富的代码质量规则,能够检测出常见的编程错误、潜在的安全问题和风格问题。 4. **自定义...

    IntelliJ IDEA-SonarLint 离线傻瓜式安装

    2. 在SonarLint的设置界面,找到“SonarLint General Settings”。 3. 点击“+”按钮添加新的SonarQube服务器。 4. 在弹出的窗口中,输入服务器的相关信息: - Name: 可以自定义,例如`sonar6.sankuai.com`。 - ...

    sonar-scanner-2.8

    2. **配置环境变量**:设置`SONAR_HOME`指向SonarScanner的安装目录,并将bin路径添加到系统PATH。 3. **初始化扫描**:在项目根目录下运行SonarScanner,提供SonarQube服务器的URL、项目密钥和版本等信息。 4. **...

    sonarqube全版本语言包

    sonar-l10n-zh-plugin-9.2.jar,sonar-l10n-zh-plugin-8.9.jar,sonar-l10n-zh-plugin-9.4.jar,sonar-auth-gitlab-plugin-1.3.2.jar

    sonar-maven-plugin-3.6.0.1398.jar

    java运行依赖jar包

    sonarqube的插件集合

    checkstyle-sonar-plugin-4.11.jar;sonar-findbugs-plugin.jar;sonar-java-plugin-5.8.0.15699.jar;sonar-java-plugin-...其中sonar-java-plugin-5.8.0.15699.jar和sonar-java-plugin-4.15.0.12310.jar随便用一个

    sonar-scanner-cli-3.3.0.1492-linux.zip

    2. **初始化配置**:在项目根目录下创建或修改`sonar-project.properties`文件,配置项目的基本信息,如项目Key、版本号,以及SonarQube服务器的连接信息。 3. **执行分析**:在命令行中运行`sonar-scanner`命令,...

    sonar-runner-dist-2.4.rar

    sonar-runner-dist-2.4 sonarque 插件 Sonarqube是一个开源平台,是一款代码质量管理和环境搭建工具。它目前支持25种以上语言,包括Java、C/C++、C#、PHP、Flex、JavaScript、Python、PL/SQL、COBOL等,此外,它还...

Global site tag (gtag.js) - Google Analytics