guoyu07 / sbt-sonar

An sbt plugin to analyse code quality and test coverage of a Scala project with SonarQube.

sbt-sonar

An sbt plugin which can be used to run sonar-scanner launcher to analyse a Scala project with SonarQube - a tool for continuous code inspection and quality management ✅. This plugin is particularly useful if you use sbt-release for automated release process in your project.

Requirements

• sbt 0.13.5+ or 1.0+
• Scala 2.11/2.12
• SonarQube server - see my sonarqube-scala-docker repository, which provides a docker-compose recipe for out-of-the-box SonarQube instance with support for Scala, Scoverage (code coverage metrics) and Scalastyle + Scapegoat (static code analysis). Alternatively, see the instructions for manual installation.
• sonar-scanner executable installed on your CI server or locally if you intend to run the analysis on your machine.

Installation

To install this plugin in your project, add the following to your ./project/plugins.sbt file:

addSbtPlugin("com.github.mwz" % "sbt-sonar" % "1.3.0")

Usage

Before using the plugin, make sure you have defined the SONAR_SCANNER_HOME environmental variable, or sonarScanner.home system property, and updated the global settings in $SONAR_SCANNER_HOME/conf/sonar-scanner.properties to point to your SonarQube instance.

You can define your project properties either in the external config file sonar-project.properties, which should be located in the root directory of your project as explained in SonarQube Scanner guide or directly in sbt. By default, the plugin expects the properties to be defined in the sonarProperties setting key in sbt, which comes with the following set of predefined properties:

• sonar.projectName - your project name defined in the name sbt setting key.
• sonar.projectKey - your project name transformed into a lowercase and dash-separated value.
• sonar.sourceEncoding - UTF-8.
• sonar.sources - default Scala source directory relative to the root of your project (usually src/main/scala).
• sonar.scoverage.reportPath - relative path to the scoverage report (e.g. target/scala-2.12/scoverage-report/scoverage.xml)
• sonar.scala.scapegoat.reportPath - relative path to the scapegoat report (e.g. target/scala-2.12/scoverage-report/scoverage.xml)

If you wish to add more properties to the existing config e.g. to configure your Sonar plugins or set up multi-module project, use the ++= operator, e.g.:

import sbtsonar.SonarPlugin.autoImport.sonarProperties
 
sonarProperties ++= Map(
  "sonar.sources" -> "src/main/scala",
  "sonar.modules" -> "module1,module2",
  "module1.sonar.projectName" -> "Module 1",
  "module2.sonar.projectName" -> "Module 2"
  ...
)

To overwrite the entire config provided by default, use the := operator, e.g.:

import sbtsonar.SonarPlugin.autoImport.sonarProperties
 
sonarProperties := Map(
  "sonar.projectName" -> "Project Name",
  "sonar.projectKey" -> "project-name",
  "sonar.sources" -> "src/main/scala",
  "sonar.sourceEncoding" -> "UTF-8",
  "sonar.scoverage.reportPath" -> "target/scala-2.12/scoverage-report/scoverage.xml",
  "sonar.scala.scapegoat.reportPath" -> "target/scala-2.12/scapegoat-report/scapegoat.xml"
  ...
)

To use the sonar-project.properties file instead, you can set the sonarUseExternalConfig to true, e.g.:

import sbtsonar.SonarPlugin.autoImport.sonarUseExternalConfig
 
sonarUseExternalConfig := true

To run the plugin, execute the sonarScan sbt task in your project. Depending on the configuration option you have chosen, the plugin will update the sonar.projectVersion property to your current project version either in sonar-project.properties file or in the sonarProperties in sbt config and it will run the sonar-scanner executable printing the progress to sbt console. Also, you can overwrite/set sonarProperties via system properties (java options) when you execute sonarScan command, e.g.:

 sbt sonarScan -Dsonar.projectName=dev-projectName

This plugin can be also easily used with the sbt-release by wrapping the sonarScan task in a releaseStepTask in the following way:

import sbtsonar.SonarPlugin.autoImport.sonarScan
 
releaseProcess := Seq[ReleaseStep](
  ...
  releaseStepCommand("coverageOn"),
  releaseStepTask(test),
  releaseStepCommand("coverageOff"),
  releaseStepTask(coverageReport),
  releaseStepTask(scapegoat),
  releaseStepTask(sonarScan),
  ...
)

Changelog

• 1.3.0 - Allow to set sonar properties via system properties (#7).
• 1.2.0 - Use SONAR_SCANNER_HOME/bin for lookup of the sonar-scanner executable (#4).
• 1.1.0 - Search for sonar-scanner home directory in system properties (sonarScanner.home) if SONAR_SCANNER_HOME environmental variable is not defined (#1).
• 1.0.0 - Support for sbt 1.0 💪 default scoverage and scapegoat report paths added automatically to the sonarProperties config; added unit and sbt tests.
• 0.3.1 - Updated the scope of scalaSource setting key to resolve scoping ambiguity with some other plugins.
• 0.3.0 - Defined a set of default project settings in the sonarProperties config key.
• 0.2.0 - Added the ability to define sonar project properties directly in sbt.
• 0.1.0 - First release of the plugin! 🎉

License

The project is licensed under the Apache License v2. See the LICENSE file for more details.