2021年10月12日 (二) 01:22的最新版本

部署SonarQube

Docker部署

dcker pull sonarqube:7.9.6-community
docker run -p 9000:9000 sonarqube:7.9.6-community

插件安装

checkstyle
PMD
dependency check
jacoco

Maven集成

DependencyCheck

<build>
<plugins>
    <plugin>
        <groupId>org.owasp</groupId>
        <artifactId>dependency-check-maven</artifactId>
        <version>6.3.2</version>
        <executions>
            <execution>
                <goals>
                    <goal>check</goal>
                </goals>
            </execution>
        </executions>
    </plugin>
</plugins>
</build>

./mvnw compile 
./mvnw dependency-check:check -Dformats=JSON,HTML

./mvnw sonar:sonar -Dsonar.projectName=xxx \
    -Dsonar.host.url=http://localhost:9000 \
    -Dsonar.login=admin \
    -Dsonar.password=admin \
    -Dsonar.language=java \
    -Dsonar.sourceEncoding=UTF-8 \
    -Dsonar.sources=./src/main/java \
    -Dsonar.java.binaries=./target/classes \
    -Dsonar.dependencyCheck.jsonReportPath=./target/dependency-check-report.json \
    -Dsonar.dependencyCheck.htmlReportPath=./target/dependency-check-report.html

Checkstyle

PMD

JaCoCo