Logo AND Algorithmique Numérique Distribuée

Public GIT Repository
sonar: disable a weird rule
[simgrid.git] / sonar-project.properties
index 33c75f1..ec1e0f2 100644 (file)
@@ -1,9 +1,9 @@
 # This file is used to scan the project for issues automatically 
-# Browse the result here: https://sonarqube.com/dashboard?id=simgrid
+# Browse the result here: https://sonarcloud.io/dashboard/?id=simgrid
 
 sonar.projectKey=simgrid
 sonar.projectName=SimGrid
-sonar.projectVersion=3.16
+sonar.projectVersion=3.21.90
 
 sonar.links.homepage=http://simgrid.org
 sonar.links.issue=https://github.com/simgrid/simgrid/issues
@@ -13,7 +13,7 @@ sonar.sources=src,examples,include,teshsuite
 
 
 # Disable some rules on some files
-sonar.issue.ignore.multicriteria=j1,j2,jni1,jni2,c1,c2a,c2b,c3,c4a,c4b,c5a,c5b,c6a,c6b,f1
+sonar.issue.ignore.multicriteria=j1,j2,j3,jni1,jni2,c1,c2a,c2b,c3,c4a,c4b,c5a,c5b,c6a,c6b,c7,c8,c9,f1
 
 # The Object.finalize() method should not be overriden
 # But we need to clean the native memory with JNI
@@ -25,6 +25,11 @@ sonar.issue.ignore.multicriteria.j1.resourceKey=**/*.java
 sonar.issue.ignore.multicriteria.j2.ruleKey=squid:S1148
 sonar.issue.ignore.multicriteria.j2.resourceKey=**/*.java
 
+# Using command line arguments is security-sensitive
+# But the authors of the applications using our library will be their only users, so there is no security concern
+sonar.issue.ignore.multicriteria.j3.ruleKey=squid:S4823
+sonar.issue.ignore.multicriteria.j3.resourceKey=**/*.java
+
 # "reinterpret_cast" should not be used
 # But this is exactly intended to store a pointer into a long -- what we do here
 sonar.issue.ignore.multicriteria.jni1.ruleKey=cpp:S3630
@@ -75,12 +80,26 @@ sonar.issue.ignore.multicriteria.c6a.resourceKey=src/**/*.cpp
 sonar.issue.ignore.multicriteria.c6b.ruleKey=cpp:S3584
 sonar.issue.ignore.multicriteria.c6b.resourceKey=teshsuite/**/*.cpp
 
+# Preprocessor operators "#" and "##" should not be used
+# Until after Augustin goes to rehab, we cannot remove them all
+sonar.issue.ignore.multicriteria.c7.ruleKey=c:PPStringifyAndPastingUsage
+sonar.issue.ignore.multicriteria.c7.resourceKey=**/*
+
+# Deprecated code should be removed
+# We do have a process to remove deprecated code
+sonar.issue.ignore.multicriteria.c8.ruleKey=cpp:S1133
+sonar.issue.ignore.multicriteria.c8.resourceKey=**/*
+
+# Lambda return types should be implicit
+# I don't see the point in general, plus we mostly use them when forced, to disambiguate
+sonar.issue.ignore.multicriteria.c8.ruleKey=cpp:S3574
+sonar.issue.ignore.multicriteria.c8.resourceKey=**/*
+
 # "reinterpret_cast" should not be used
 # But we need this to interface C and Fortran
 sonar.issue.ignore.multicriteria.f1.ruleKey=cpp:S3630
 sonar.issue.ignore.multicriteria.f1.resourceKey=src/smpi/bindings/smpi_f77*.cpp
 
-
 # Exclude some files from the analysis:
 #  - our unit tests 
 #  - the tests that we borrowed elsewhere (MPICH and ISP)
@@ -97,14 +116,18 @@ sonar.cpd.exclusions=examples/**,teshsuite/**
 # The build-wrapper output dir
 sonar.cfamily.build-wrapper-output=bw-outputs
 
+# Allow multithreaded execution
+sonar.cfamily.threads=4
+
 # Where the coverage files are located
 # See https://docs.sonarqube.org/pages/viewpage.action?pageId=5312222
 sonar.cfamily.gcov.reportsPath=Testing/CoverageInfo
 # Files to ignore from coverage analysis:
 #   - foreign test suites
 #   - platform files (I fail to get sonar ignore *.xml files)
-#   - Java code and examples
-sonar.coverage.exclusions=teshsuite/smpi/isp/**,teshsuite/smpi/mpich3-test/**,examples/platforms/**,src/bindings/java/**,examples/java/**
+#   - Java code, examples and tests
+#   - Python files
+sonar.coverage.exclusions=teshsuite/smpi/isp/**,teshsuite/smpi/mpich3-test/**,examples/platforms/**,**/*.xml,src/bindings/java/**,examples/java/**,teshsuite/java/**,**/*.py
 
 # Encoding of the source files
 sonar.sourceEncoding=UTF-8
@@ -112,8 +135,6 @@ sonar.sourceEncoding=UTF-8
 # Version of the used prog languages
 sonar.java.source=7
 sonar.java.binaries=CMakeFiles/simgrid-java_jar.dir,examples/java
-sonar.c.std=gnu11
-sonar.cpp.std=gnu++11
 
 # Don't talk to me: travis don't like your verbosity
 # sonar.verbose=true