JarCasting| SonarCloud / SonarSource SA (Technical Debt analysis) |
||
| DeepCode / DeepCode AG (real-time AI powered semantic code analysis) |
||
| JProfiler / ej-technologies GmbH (when it comes to profiling: Java profiler tool) |
 |
|
| Travis CI (Linux Build and Integration Tests) |
 |
|
| AppVeyor CI (Windows Build and Deployment) |
Download latest snapshot |
SonarQube C++ plugin (Community)
SonarQube is an open platform to manage code quality. This plugin adds C++ support to SonarQube with the focus on integration of existing C++ tools.
The sensors for reading reports can be used with the CXX plugin or SonarCFamily plugin.
This plugin is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version.
- parser supporting
C89,C99,C11,C17C++03,C++11,C++14,C++17,C++20- Microsoft extensions:
C++/CLI,Attributed ATL - GNU extensions
- CUDA extensions
- Microsoft Windows and Linux for runtime environment
Sensors for static and dynamic code analysis:
- Cppcheck warnings support (http://cppcheck.sourceforge.net/)
- GCC/G++ warnings support (https://gcc.gnu.org/)
- Visual Studio and Core Guideline Checker warnings support (https://www.visualstudio.com/)
- Clang Static Analyzer support (https://clang-analyzer.llvm.org/)
- Clang Tidy warnings support (http://clang.llvm.org/extra/clang-tidy/)
- Infer warnings support (https://fbinfer.com/)
- PC-Lint warnings support (http://www.gimpel.com/)
- RATS (https://github.com/andrew-d/rough-auditing-tool-for-security)
- Valgrind (http://valgrind.org/)
- Vera++ (https://bitbucket.org/verateam/vera/wiki/Home)
- Dr. Memory warnings support (http://drmemory.org/)
- Generic Issue Import Format support
- any other tools can be integrated
Test framework sensors for:
- XUnit file format
- Google Test file format (https://github.com/google/googletest)
- Boost.Test file format (https://www.boost.org/doc/libs/release/libs/test/)
- CppTest file format (https://cpptest.sourceforge.io/)
- CppUnit file format (https://sourceforge.net/projects/cppunit/)
- VSTest file format (https://github.com/microsoft/vstest)
- NUnit file format (https://nunit.org/)
- Generic Test Data support
- extensions over XSLT possible
Coverage sensors for:
- Visual Studio coverage reports (https://www.visualstudio.com/)
- Bullseye coverage reports (http://www.bullseye.com/)
- Cobertura coverage reports (http://cobertura.github.io/cobertura/)
- gcov / gcovr coverage reports --xml https://gcovr.com/en/stable/guide.html
- OpenCppCoverage --export_type=cobertura (https://github.com/OpenCppCoverage/OpenCppCoverage/)
- sonar.cxx.cobertura.reportPaths
- Testwell CTC++ coverage reports (https://www.verifysoft.com/en_ctcpp.html)
- Generic Coverage support
Simple to customize
- provide the ability to write custom rules
- custom rules by XPath checks possible
- custom rules by regular expression checks possible
- easy 3rd party tool integration with XML rule definitions and reports possible
Quickstart
Resources
Alternatives:
That's not the only choice when you are looking for C++ support in SonarQube there is also
- the commercial C/C++ plugin from SonarSource.
- the commercial C/C++ plugin from CppDepend
- the Coverity plugin
- the commercial PVS-Studio plugin
Choose whatever fits your needs.