search

MarketSquare / robotframework-robocop

Tool for static code analysis of Robot Framework language
Apache License 2.0
187 stars 38 forks source link

SonarQube module for Robocop #759

Open AurelienSoulet opened 1 year ago

AurelienSoulet commented 1 year ago

Hello,

In order to follow up the code quality of our robot framework scripts, we are interested to have a SonarQube module.

Thank you in advance.

KR,

Aurélien

bhirsz commented 1 year ago

Hi, thank you for the suggestion! I have never used Sonar Qube directly but I wanted to integrate Robocop with Sonar Qube. Some time ago I have added Sarif support to the Robocop reports. Would it be possible to import issues from the Robocop to the Sonar Qube using Sarif reports? https://docs.sonarqube.org/latest/analyzing-source-code/importing-external-issues/importing-issues-from-sarif-reports/

mnojek commented 1 year ago

I revisited this issue and I think that thanks to SARIF support in Robocop, it is possible to import the issues to SonarQube. Of course, they do not list the tool on the official list here, but as you @bhirsz mentioned, SARIF format is enough to integrate Robocop with SonarQube. I haven't tried it myself, though.

What I did is, I wrote an email to SonarSource to ask them if they can add our tool to the official list. Let's see what they respond. I will keep this issue updated.

@AurelienSoulet Did you have a chance to integrate Robocop with SonarQube, according to what @bhirsz wrote in the previous message?