SonarCloud / SonarSource SA (Technical Debt analysis)
DeepCode / DeepCode AG (real-time AI powered semantic code analysis)
JProfiler / ej-technologies GmbH (when it comes to profiling: Java profiler tool)
Travis CI (Linux Build and Integration Tests)
AppVeyor CI (Windows Build and Deployment)		Download latest snapshot

SonarQube is an open platform to manage code quality. This plugin adds C++ support to SonarQube with the focus on integration of existing C++ tools.

This plugin is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version.

• parser supporting C89, C99, C11, C17, C++03, C++11, C++14, C++17 and C++20 standards
  • Microsoft extensions: C++/CLI, Attributed ATL
  • GNU extensions
  • CUDA extensions
• Microsoft Windows and Linux for runtime environment

Sensors for static and dynamic code analysis:

• Cppcheck warnings support (http://cppcheck.sourceforge.net/)
• GCC/G++ warnings support (https://gcc.gnu.org/)
• Visual Studio warnings support (https://www.visualstudio.com/)
• Visual Studio Core Guideline Checker warnings support
• Clang Static Analyzer support (https://clang-analyzer.llvm.org/)
• Clang Tidy warnings support (http://clang.llvm.org/extra/clang-tidy/)
• Infer warnings support (https://fbinfer.com/)
• PC-Lint warnings support (http://www.gimpel.com/)
• RATS (https://github.com/andrew-d/rough-auditing-tool-for-security)
• Valgrind (http://valgrind.org/)
• Vera++ (https://bitbucket.org/verateam/vera/wiki/Home)
• Dr. Memory warnings support (http://drmemory.org/)

Test framework sensors for:

• XUnit file format
• Google Test file format
• Boost.Test file format
• CppUnit file format
• VSTest file format
• NUnit file format
• extensions over XSLT possible

Coverage sensors for:

• Visual Studio coverage reports
• Bullseye coverage reports (http://www.bullseye.com/)
• Cobertura coverage reports (http://cobertura.github.io/cobertura/)
  • gcov / gcovr coverage reports --xml https://gcovr.com/en/stable/guide.html
  • OpenCppCoverage --export_type=cobertura (https://github.com/OpenCppCoverage/OpenCppCoverage/)
• Testwell CTC++ coverage reports (https://www.verifysoft.com/en_ctcpp.html)

Simple to customize

• provide the ability to write custom rules
• custom rules by XPath checks possible
• custom rules by regular expression checks possible
• easy 3rd party tool integration with XML rule definitions and reports possible

1. Setup a SonarQube instance
2. Install the plugin (see Installation)
3. Run an analysis (see Running the analysis)

• Latest release
• Documentation
• Issue Tracker
• Continuous Integration Unix
• Continuous Integration Windows
• Sample project

That's not the only choice when you are looking for C++ support in SonarQube there is also

• the commercial C/C++ plugin from SonarSource.
• the commercial C/C++ plugin from CppDepend
• the Coverity plugin
• the commercial PVS-Studio plugin

Choose whatever fits your needs.

Subscribe our release feed