Finder plugin extension with FindBugs custom plugin

Question

We created a custom plugin for FindBugs (for clarity: it is a findbugs plugin, not a sonar plugin), and we want to extend the FindBugs sonar plugin with our custom findbugs plugin.

We are currently using SonarQube 5.1 with the FindBugs 3.2 sonar plugin.

Since our custom plugbug-plugin is a valid plugin for FindBugs, we thought the easiest way to activate it was to use the FindBugs instance plugin system from our existing sonar plugin, but we could not find a way to activate our findbugs-plugin this way.

We also tried to create the rules.xml file and put our banner in sonar_home / extensions / rules / findbugs, as described in https://jira.sonarsource.com/browse/SONAR-1481 , but this does not seem to work with the version of Sonar- FindBugs plugin that we use.

What is the right way to configure our version of SonarQube to build our custom FindBugs plugin? What steps do we need to take?

Answer 1

Your options open the SonarQube FindBugs plugin and add your rules along with the rules for finding security errors (see this commit ) or create a new plugin similar to how to handle security errors before it is turned over to the FindBugs plugin.

In any case, you list your jar as a dependency in pom.xml, provide the already created rules.xml and add a storage definition .

If you go on an autonomous route, which is probably better, you need

• wait for the error to be fixed in 5.2
• use the FindBugs repository key. See the "Before" side of this commit .
• provide the necessary basic plug-in system

EDIT: Edited to add commit links and extend autonomous route requirements.