sonar.projectKey=simgrid
sonar.projectName=SimGrid
-sonar.projectVersion=3.21.90
+sonar.projectVersion=3.22.90
-sonar.links.homepage=http://simgrid.org
-sonar.links.issue=https://github.com/simgrid/simgrid/issues
-sonar.links.scm=https://github.com/simgrid/simgrid.git
+sonar.links.homepage=https://simgrid.org
+sonar.links.issue=https://framagit.org/simgrid/simgrid/issues
+sonar.links.scm=https://framagit.org/simgrid/simgrid/
# Comma-separated paths to directories with sources (required)
sonar.sources=src,examples,include,teshsuite
# Disable some rules on some files
-sonar.issue.ignore.multicriteria=j1,j2,jni1,jni2,c1,c2a,c2b,c3,c4a,c4b,c5a,c5b,c6a,c6b,c7,f1
+sonar.issue.ignore.multicriteria=j1,j2,j3,jni1,jni2,c1,c2a,c2b,c3,c4a,c4b,c5a,c5b,c6a,c6b,c7,c8,c9,c10,f1,p1
# The Object.finalize() method should not be overriden
# But we need to clean the native memory with JNI
sonar.issue.ignore.multicriteria.j2.ruleKey=squid:S1148
sonar.issue.ignore.multicriteria.j2.resourceKey=**/*.java
+# Using command line arguments is security-sensitive
+# But the authors of the applications using our library will be their only users, so there is no security concern
+sonar.issue.ignore.multicriteria.j3.ruleKey=squid:S4823
+sonar.issue.ignore.multicriteria.j3.resourceKey=**/*.java
+
# "reinterpret_cast" should not be used
# But this is exactly intended to store a pointer into a long -- what we do here
sonar.issue.ignore.multicriteria.jni1.ruleKey=cpp:S3630
# Preprocessor operators "#" and "##" should not be used
# This poses portability issues, but we test on a large panel of architectures on purpose
-sonar.issue.ignore.multicriteria.c2a.ruleKey=cpp:PPStringifyAndPastingUsage
-sonar.issue.ignore.multicriteria.c2a.resourceKey=**/*.cpp
+# Until after Augustin goes to rehab, we cannot remove them all
+sonar.issue.ignore.multicriteria.c2a.ruleKey=c:PPStringifyAndPastingUsage
+sonar.issue.ignore.multicriteria.c2a.resourceKey=**/*
sonar.issue.ignore.multicriteria.c2b.ruleKey=cpp:PPStringifyAndPastingUsage
-sonar.issue.ignore.multicriteria.c2b.resourceKey=**/*.hpp
+sonar.issue.ignore.multicriteria.c2b.resourceKey=**/*
# Macro names should comply with a naming convention
# But the macros in this file are named after the MPI standard
sonar.issue.ignore.multicriteria.c6b.ruleKey=cpp:S3584
sonar.issue.ignore.multicriteria.c6b.resourceKey=teshsuite/**/*.cpp
-# Preprocessor operators "#" and "##" should not be used
-# Until after Augustin goes to rehab, we cannot remove them all
-sonar.issue.ignore.multicriteria.c7.ruleKey=c:PPStringifyAndPastingUsage
-sonar.issue.ignore.multicriteria.c7.resourceKey=**/*
+# Macros should not be used to define constants
+# *.h includes are meant to be usable in C
+sonar.issue.ignore.multicriteria.c7.ruleKey=cpp:S5028
+sonar.issue.ignore.multicriteria.c7.resourceKey=**/*.h
+
+# Deprecated code should be removed
+# We do have a process to remove deprecated code
+sonar.issue.ignore.multicriteria.c8.ruleKey=cpp:S1133
+sonar.issue.ignore.multicriteria.c8.resourceKey=**/*
+
+# Lambda return types should be implicit
+# I don't see the point in general, plus we mostly use them when forced, to disambiguate
+sonar.issue.ignore.multicriteria.c9.ruleKey=cpp:S3574
+sonar.issue.ignore.multicriteria.c9.resourceKey=**/*
+
+# Standard outputs should not be used directly to log anything
+# Irrelevant for parsing examples in teshsuite/simdag
+sonar.issue.ignore.multicriteria.c10.ruleKey=cpp:S106
+sonar.issue.ignore.multicriteria.c10.resourceKey=teshsuite/simdag/**/*.cpp
# "reinterpret_cast" should not be used
# But we need this to interface C and Fortran
sonar.issue.ignore.multicriteria.f1.ruleKey=cpp:S3630
sonar.issue.ignore.multicriteria.f1.resourceKey=src/smpi/bindings/smpi_f77*.cpp
+# In Python, Using command line arguments is security-sensitive
+# But we are cautionous with it
+sonar.issue.ignore.multicriteria.p1.ruleKey=python:S4823
+sonar.issue.ignore.multicriteria.p1.resourceKey=**/*.py
# Exclude some files from the analysis:
-# - our unit tests
+# - our unit tests
# - the tests that we borrowed elsewhere (MPICH and ISP)
# - Flex-generated files
# - Collectives that we borrowed elsewhere (mpich, openMPI and other implems)
# - the NAS, that are included in our examples
+# - The Catch2 library, that is included in our unit tests
# - RngStream, that is included in SimGrid
-sonar.exclusions=src/*_unit.c*,teshsuite/smpi/mpich3-test/**,teshsuite/smpi/isp/**,**/*_dtd.c,**/*_dtd.h,**/*yy.c,src/xbt/automaton/parserPromela.tab.*,src/smpi/colls/**/*,examples/smpi/NAS/*,src/xbt/RngStream.c,include/xbt/RngStream.h
+sonar.exclusions=src/include/catch.hpp,src/*_unit.c*,teshsuite/smpi/mpich3-test/**,teshsuite/smpi/isp/**,**/*_dtd.c,**/*_dtd.h,**/*yy.c,src/xbt/automaton/parserPromela.tab.*,src/smpi/colls/**/*,examples/smpi/NAS/*,src/xbt/RngStream.c,include/xbt/RngStream.h
# Exclude our examples from the duplication detection.
# Examples are expected to be somehow repetitive
sonar.cfamily.build-wrapper-output=bw-outputs
# Allow multithreaded execution
-sonar.cfamily.threads=2
+sonar.cfamily.threads=4
# Where the coverage files are located
# See https://docs.sonarqube.org/pages/viewpage.action?pageId=5312222
sonar.cfamily.gcov.reportsPath=Testing/CoverageInfo
# Files to ignore from coverage analysis:
# - foreign test suites
-# - platform files (I fail to get sonar ignore *.xml files)
-# - Java code, examples and tests
-sonar.coverage.exclusions=teshsuite/smpi/isp/**,teshsuite/smpi/mpich3-test/**,examples/platforms/**,src/bindings/java/**,examples/java/**,teshsuite/java/**
+# - XML files
+# - Python files used to generate either simcalls or deployment files
+sonar.coverage.exclusions=teshsuite/smpi/isp/**,teshsuite/smpi/mpich3-test/**,**/*.xml,src/simix/simcalls.py,**/generate.py
# Encoding of the source files
sonar.sourceEncoding=UTF-8
# Version of the used prog languages
sonar.java.source=7
-sonar.java.binaries=CMakeFiles/simgrid-java_jar.dir,examples/java
+sonar.java.binaries=CMakeFiles/simgrid-java_jar.dir,examples/deprecated/java
# Don't talk to me: travis don't like your verbosity
# sonar.verbose=true
+
+### NOTE: the following properties are overridden by Jenkins configuration
+###
+#sonar.java.binaries
+#sonar.cfamily.build-wrapper-output
+#sonar.cfamily.gcov.reportsPath
+#sonar.python.coverage.reportPath
+#sonar.coverage.jacoco.xmlReportPaths
+#sonar.cfamily.threads
