SonarQube - Combining Sonar way, FindBugs, PMD and Checkstyle without duplicates

sonarqube sonarqube-4.5
schnatterer picture schnatterer · Jan 23, 2015 · Viewed 9.9k times · Source

I'm looking for best practices using SonarQube with the FindBugs, PMD and Checkstyle plugins.

  1. How do the rules in SonarQube's default quality profile "Sonar way" relate to those of the plugins? Are they completely different rules or does the Sonar way contain the most important rules from those plugins?
  2. What is the best way of combining those rule sets? How can I avoid duplicate checks?
  3. Sonar v.3.x contains a "Sonar way with Findbugs" profile. I can't find it in v.4.5.1 - what happened to it?

Answer

Fabrice - SonarSource Team picture Fabrice - SonarSource Team · Jan 23, 2015

The SonarQube Java plugin alone already covers all the Checkstyle and PMD rules - which is why the related plugins are no more bundled in SonarQube. So you can get rid of those plugins and forget the related rules.

Concerning Findbugs, most rules are complementary to the SonarQube Java plugin rules. There's no "Sonar way with Findbugs" profile anymore because that's the convention for all the language plugin to have only a "Sonar way" profile.

Related questions

Duplicated block of Code in Sonar for import statements in Java

In Sonar 4.5.6 (with default settings) I am seeing Duplicated Blocks message as My java code for which I am getting the message is like below:- package com.jabong.orchestratorservice.adapter.order.endpoints; import com.jabong.orchestratorservice.adapter.order.request.…

Read More
SonarQube Exclude a directory

I am trying to exclude a directory from being analyzed by Sonar. I have the following properties defined in my sonar-project.properties file: sonar.sources=src/java sonar.exclusions=src/java/test/****/*.java The directory structure I have is: src/…

Read More
Turning Sonar off for certain code

Is it possible to turn off sonar (www.sonarsource.org) measurements for specific blocks of code, which one doesn't want to be measured? An example is the "Preserve Stack Trace" warning which Findbugs outputs. When leaving the server, I might …

Read More