Configure SonarQube Cloud for wflow Repository

[alimeshgi]

Description: We need to configure SonarQube Cloud for the wflow repository as part of the Product Line Hydrology's adoption of SonarQube Cloud. This will help us ensure code quality, security, and maintainability.

Tasks:

1. Add Repository to SonarQube Cloud:

• Ensure the wflow repository is added to SonarQube Cloud.
• Verify that the repository is set up for automatic analysis.

2. Configuration:

• Create and configure the .sonarcloud.properties file in the root of the repository.
• Set sonar.tests to the correct folder.
• Add any necessary exclusions using sonar.exclusions.

3. Quality Profiles and Gates:

• Use the default SonarQube quality profiles and gates as recommended by the architecture guild.
• Ensure that the Quality Gate is part of the pull request process.

4. CI-based Scan (if needed):

• If automatic analysis is not sufficient, set up a CI-based scan using GitHub Actions.
• Configure the CI pipeline to send results to SonarQube Cloud.
• Add code coverage reports to SonarQube Cloud if applicable.

Deadline: End of April 2025

[JoostBuitink]

Does SonarQube support Julia? From what I saw at the Ribasim repo, they are only scanning their non-Julia code. @deltamarnix, do you know more about this?

I don't see Julia being mentioned here: https://docs.sonarsource.com/sonarqube-server/10.8/analyzing-source-code/languages/overview/

[deltamarnix]

You are correct. SonarQube doesn't support Julia. In the MEMO on the teams channel you can find my motivation to still add it. Mainly to scan any utility scripts that you have in your code base. And also to have an overview of what we still need to support. And we can then ask the sonarqube developers.

[JoostBuitink]

You are correct. SonarQube doesn't support Julia. In the MEMO on the teams channel you can find my motivation to still add it. Mainly to scan any utility scripts that you have in your code base. And also to have an overview of what we still need to support. And we can then ask the sonarqube developers.

Thanks for your reply! As for the Wflow.jl repository, we actually only have Julia code (and no other languages/utility scripts) as part of the repository (see also the language overview on the main page). We can still implement the SonarQube workflows in our repository, but as long as there is no support for Julia, it feels a bit pointless? I think we can already ask the SonarQube developers if they have plans to support Julia at some stage.