What is the goal of profile Sonar way (extended)?

[stefandrissen]

Out of the box there are two built-in quality profiles for language OpenEdge:

• Sonar way - 17 rules activated
• Sonar way (extended) - 99 rules activated (the above 17 plus an additional 82)

A similar pattern exists for OpenEdgeDB:

• Sonar way - 1 rule activated
• Sonar way (extended) - 4 rules activated

ALL other languages just have a single (recommended?) profile.

[gquerret]

It's required by SonarQube to provide a quality profile, so the OE plugin provides the "Sonar way" profile. The "Sonar way (extended)" is provided by the Riverside Rules plugin as a default profile so users don't have to manually choose rules.

[stefandrissen]

Fair enough, why are there two plugins?
And why is there then not an extra profile for the cabl-security-rules plugin?

What is the difference between the OE plugin and the Riverside Rules plugin - is this the trial vs licensed plugin?

[gquerret]

The OE plugin is the open-source part (LGPL 3), while the Riverside Rules plugin is closed source and commercial. Security rules were initially shipped in a separate plugin due to technical reasons. They will probably be merged in the Riverside Rules in the future (low priority though). It will then be possible to have two profiles in the Riverside Rules (Standard Edition and Enterprise Edition (= std + security rules)).