cppcheck plugin/tool with sonarQube binding about sonar-cxx

[guwirth]

Hi @fayaz988,

There are different things to keep in mind:

• The cxx plugin is not a static code analyzer, it’s only an interface reading already existing reports from other static code analyzer and forward it to SonarQube. That’s different with other plugins, especially the SonarSource plugins which are real static code analysis tools and can therefore be used standalone.
• SonarLint is a tool from SonarSource supporting their own plugins only. There is no way to add other plugins.
• SonarLink was mainly written to support also other plugins, especially the cxx plugin. Main idea behind is to move the time consuming static code analysis to a server without blocking your local machine. After analysis is done you can see the results in your local IDE.

Regards,

[akshats01]

So, like you said the cxx plugin is not a static code analyzer, it’s only an interface reading already existing reports from other static code analyzer and forward it to SonarQube. Is it possible to use any (existing) plugin which would work along side my visual studio 2019, and instead of forwarding a reading from the existing reports to SonarQube, it forwards the reading to my error list debugger?

[fayaz988]

Hi @fayaz988,

There are different things to keep in mind:

• The cxx plugin is not a static code analyzer, it’s only an interface reading already existing reports from other static code analyzer and forward it to SonarQube. That’s different with other plugins, especially the SonarSource plugins which are real static code analysis tools and can therefore be used standalone.
• SonarLint is a tool from SonarSource supporting their own plugins only. There is no way to add other plugins.
• SonarLink was mainly written to support also other plugins, especially the cxx plugin. Main idea behind is to move the time consuming static code analysis to a server without blocking your local machine. After analysis is done you can see the results in your local IDE.

Regards,

Thanks for reply, i have one more question that I can see different rules repository on SonarQube from cxx plugin as below,
and issues also listed related other repos like SonarQube cxx how this is happening? is cxx is forwarding existing report as well as analyzing against other repos like SonarQube cxx? how it works? please through some light on this!!

[guwirth]

Hi @akshats01,

Is it possible to use any (existing) plugin which would work along side my visual studio 2019,

You need a VisualStudio plugin for Cppcheck. Maybe best is to ask in the Cppcheck forum: https://cppcheck.sourceforge.io/, something like this https://github.com/VioletGiraffe/cppcheck-vs-addin/releases/tag/1.5

Regards,

[guwirth]

Hi @fayaz988,

issues also listed related other repos like SonarQube cxx how this is happening?

Issues are reported in reports from a specific tool, are read by one sensor and are visible in the corresponding repo. Best is to verify the LOG file to see what happens https://github.com/SonarOpenCommunity/sonar-cxx/wiki/Get-Debug-Information

Regards,

[akshats01]

Hi @akshats01,

Is it possible to use any (existing) plugin which would work along side my visual studio 2019,

You need a VisualStudio plugin for Cppcheck. Maybe best is to ask in the Cppcheck forum: https://cppcheck.sourceforge.io/, something like this https://github.com/VioletGiraffe/cppcheck-vs-addin/releases/tag/1.5

Regards,

I understand, but as per my needs, cppcheck is not able to show the codesmells that i can view on the sonarqube cxx plugin. So i wanted to use this cxx plugin as an extension on my visual studio. But i suppose there is no possible way to achieve that.

[guwirth]

Hi @akshats01,

So i wanted to use this cxx plugin as an extension on my visual studio. But i suppose there is no possible way to achieve that.

I’m sorry but I’m not aware of a solution for your problem.

Regards,