Is there any SonarQube static code analysis for scanning Rust or Elixir code repositories?

1.1k views Asked by At

I have a Gitlab Pipeline for SonarQube which can scan technologies like Node.js, Java, and PHP, but not with Rust and Elixir.

I tried the links below for Rust, but it seems like Rust lacks support.

https://gist.github.com/kaypee90/48f4a5b16c79ab1a0e3a256c7d3937a7 https://github.com/elegoff/sonar-rust

Error

Asking here maybe someone has faced a similar issue.

2

There are 2 answers

0
emagers On

It looks like SonarQube does not provide any analysis for Rust at this time: https://docs.sonarqube.org/latest/analyzing-source-code/languages/overview/

0
md7 On

The plugin sonar-rust seems to add Rust support to SonarQube.

Quote from Readme:

The plugin enables analysis of Rust language within SonarQube, which is an open platform to manage code quality. It is compatible with SonarQube 8.9 and above (Latest tested SonarQube version is v9.8)

According to the FAQ the plugin should be usable in any CI-pipeline.

Have not tried it myself though.