vurforfree.blogg.se - Sonarlint latest version

In the past, we were really aiming at downloading analyzers. SonarLint for VS: use embedded analyzers.SonarLint for VSCode: downloading analyzers from the server (but when C/C++/C# support will be added, it will certainly rely on embedded analyzers).SonarLint for Eclipse: downloading analyzers from the server.SonarLint for IntelliJ: downloading analyzers from the server, except for C/C++ and C# analyzers that are always the embedded ones.This is not a boolean answer and this is not a commitment that it will still be valid in the future. So the question here is: for a SonarLint flavor supporting language X, does it uses the X analyzers embedded, or take the version from the server? Each SonarLint flavor has its own list of supported languages. Would it be possible for you to please list them as either “downloading” or “embedding”?įirst a clarification: when we say that SonarLint downloads analyzers from the server, it doesn’t mean it will download all analyzers (in particular don’t expect SonarLint to run third party analyzers). Developers are free to fix them in their IDE or not, but this can only a plus for the codebase quality. less false negative: some (true) issues will be detected by SonarLint and not by SonarQube.

I don’t think this is a big loss to not see those issues in the IDE.

less false positive: some (false) issues will not be detected by SonarLint, but will be raised by SonarQube → users can mark the issue as false positive in Sonarqube.

More recent versions of analyzers may have some fixes/improvements to existing rules, but we believe this is only for the best: If you follow our advice to use a recent version of SonarLint, SonarLint will either run the exact same analyzers versions as SonarQube, or more recent versions. In both cases, rules activation and parameters will come from the server. Some flavors of SonarLint will download the analyzers that are on the server, while some other flavors will continue to use the embedded one. When connected to SonarQube or SonarCloud… it depends. We release frequently to always benefit from latest improvements. SonarLint uses its own embedded versions of analyzers when used alone. The short answer is that you should always aim at using the latest version of SonarLint, this is what we think will bring the best value for your developers.