creedengo java not triggered on a java project

[springboot-guru]

Describe the bug
creedengo java not triggered on a java project analyzed by SonarQUbe

To Reproduce
Steps to reproduce the behavior:

1. Download SonarQube Community Build v25.5.0.107428 and install the plugin (see first screenshot for installation)
2. Run maven command to analyze project: mvn clean verify sonar:sonar -Dsonar.projectKey=myproject -Dsonar.projectName='myproject' -Dsonar.host.url=http://localhost:9000 -Dsonar.token=sqp_abc
3. look at the maven execution log and hope to see the project being scanned. No luck.
4. look at the Sonar dashboard to see creedengo scan result, no luck.

Expected behavior
I would expected to see either the maven output to have some proof the scan has been executed

or

When looking at SonarQube UI, to see the scan result with potential problem found

Screenshots

Software Versions

• SonarQube Version: Community Build v25.5.0.107428
• Plugin Version: 2.1.1installed

Additional context

INFO]   from pom.xml
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] 
[INFO] --- sonar:5.1.0.4751:sonar (default-cli) @ myproject ---
[INFO] Java 24.0.1 Oracle Corporation (64-bit)
[INFO] Linux 6.8.0-60-generic (amd64)
[INFO] User cache: /home/jdktwentyfour/.sonar/cache
[INFO] Communicating with SonarQube Community Build 25.5.0.107428
[INFO] JRE provisioning: os[linux], arch[x86_64]
[INFO] Starting SonarScanner Engine...
[INFO] Java 17.0.13 Eclipse Adoptium (64-bit)
[INFO] Load global settings
[INFO] Load global settings (done) | time=83ms
[INFO] Server id: 147B411E-AZcZvMTrAvnjvoWTskz0
[INFO] Loading required plugins
[INFO] Load plugins index
[INFO] Load plugins index (done) | time=13ms
[INFO] Load/download plugins
[INFO] Load/download plugins (done) | time=26ms
[INFO] Process project properties
[INFO] Process project properties (done) | time=14ms
[INFO] Project key: myproject
[INFO] Base dir: /home/jdktwentyfour/myproject
[INFO] Working dir: /home/jdktwentyfour/myproject/target/sonar
[INFO] Load project settings for component key: 'myproject'
[INFO] Load project settings for component key: 'myproject' (done) | time=40ms
[INFO] Load quality profiles
[INFO] Load quality profiles (done) | time=95ms
[INFO] Load active rules
[INFO] Load active rules (done) | time=551ms
[INFO] Load analysis cache
[INFO] Load analysis cache (1.3 kB) | time=44ms
[INFO] Preprocessing files...
[INFO] 2 languages detected in 23 preprocessed files
[INFO] 32 files ignored because of inclusion/exclusion patterns
[INFO] 0 files ignored because of scm ignore settings
[INFO] Loading plugins for detected languages
[INFO] Load/download plugins
[INFO] Load/download plugins (done) | time=21ms
[INFO] Load project repositories
[INFO] Load project repositories (done) | time=137ms
[INFO] Indexing files...
[INFO] Project configuration:
[INFO]   Excluded tests: **/src/test/java/**
[INFO] 23 files indexed
[INFO] Quality profile for java: Sonar way
[INFO] Quality profile for xml: Sonar way
[INFO] ------------- Run sensors on module myproject
[INFO] Load metrics repository
[INFO] Load metrics repository (done) | time=24ms
[INFO] Sensor JavaSensor [java]
[INFO] Configured Java source version (sonar.java.source): 24, preview features enabled (sonar.java.enablePreview): false
[INFO] Server-side caching is enabled. The Java analyzer will not try to leverage data from a previous analysis.
[INFO] Using ECJ batch to parse 22 Main java source files with batch size 418 KB.
[INFO] Starting batch processing.
[INFO] The Java analyzer cannot skip unchanged files in this context. A full analysis is performed for all files.
[INFO] 100% analyzed
[INFO] Batch processing: Done.
[INFO] Did not optimize analysis for any files, performed a full analysis for all 22 files.
[INFO] No "Test" source files to scan.
[INFO] No "Generated" source files to scan.
[INFO] Sensor JavaSensor [java] (done) | time=2686ms
[INFO] Sensor SurefireSensor [java]
[INFO] parsing [/home/jdktwentyfour/myproject/target/surefire-reports]
[INFO] Sensor SurefireSensor [java] (done) | time=70ms
[INFO] Sensor XML Sensor [xml]
[INFO] 1 source file to be analyzed
[INFO] 1/1 source file has been analyzed
[INFO] Sensor XML Sensor [xml] (done) | time=156ms
[INFO] Sensor JaCoCo XML Report Importer [jacoco]
[INFO] 'sonar.coverage.jacoco.xmlReportPaths' is not defined. Using default locations: target/site/jacoco/jacoco.xml,target/site/jacoco-it/jacoco.xml,build/reports/jacoco/test/jacocoTestReport.xml
[INFO] Importing 1 report(s). Turn your logs in debug mode in order to see the exhaustive list.
[INFO] Sensor JaCoCo XML Report Importer [jacoco] (done) | time=40ms
[INFO] Sensor Java Config Sensor [iac]
[INFO] 0 source files to be analyzed
[INFO] 0/0 source files have been analyzed
[INFO] Sensor Java Config Sensor [iac] (done) | time=16ms
[INFO] Sensor IaC Docker Sensor [iac]
[INFO] 0 source files to be analyzed
[INFO] 0/0 source files have been analyzed
[INFO] Sensor IaC Docker Sensor [iac] (done) | time=81ms
[INFO] Sensor TextAndSecretsSensor [text]
[INFO] Available processors: 8
[INFO] Using 8 threads for analysis.
[INFO] Using git CLI to retrieve untracked files
[INFO] Analyzing language associated files and files included via "sonar.text.inclusions" that are tracked by git
[INFO] 23 source files to be analyzed
[INFO] 23/23 source files have been analyzed
[INFO] Sensor TextAndSecretsSensor [text] (done) | time=440ms
[INFO] ------------- Run sensors on project
[INFO] Sensor Zero Coverage Sensor
[INFO] Sensor Zero Coverage Sensor (done) | time=1ms
[INFO] Sensor Java CPD Block Indexer
[INFO] Sensor Java CPD Block Indexer (done) | time=61ms
[INFO] ------------- Gather SCA dependencies on project
[INFO] Dependency analysis skipped
[INFO] CPD Executor 12 files had no CPD blocks
[INFO] CPD Executor Calculating CPD for 10 files
[INFO] CPD Executor CPD calculation finished (done) | time=6ms
[INFO] SCM revision ID 'e872c319b7a93c089b3f9cccdc42bbd1dd4c67b6'
[INFO] Analysis report generated in 86ms, dir size=401.1 kB
[INFO] Analysis report compressed in 49ms, zip size=98.7 kB
[INFO] Analysis report uploaded in 63ms
[INFO] ANALYSIS SUCCESSFUL, you can find the results at: http://localhost:9000/dashboard?id=myproject
[INFO] Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
[INFO] More about the report processing at http://localhost:9000/api/ce/task?id=4afea5f5-0790-4a53-8c0d-b74a0c9f380f
[INFO] Analysis total time: 6.302 s
[INFO] SonarScanner Engine completed successfully
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  32.723 s

Issue
It seems there is no scan at all. Or could you please confirm what is the command needed to run a scan on a java project? I tried something like mvn creedengo:creedengo and no luck

[dedece35]

hi @springboot-guru ,
thank you for the issue.
as I can see: creedengo-java is well installed and the sonar analysis is well run and the java files is well detected because it loads the java profile with its rules.
But, in the analysis log we can see thtat it's the "sonar way" profile is loaded. This is suspiscious.
Can you give me a screenshot of you Profile page where we can see java profiles, please ?
I suspect that you don't load the creedengo profiles (containing creedengo java profile and set as default profile for java projects)

[springboot-guru]

Thank you for looking at this @dedece35

Of course, here we go:

If this is not the correct page, please let me know. If you need any other screenshot, please also let me know.

I am sure the plugin is installed, but it seems there are no other profiles than the default "Sonar Way"

[dedece35]

@springboot-guru,
with your first screenshot, as you said, we can see that de creedengo-java is well installed. Thus, this installation bring all the rule present in the plugin. But, this isn't enough to use these rules.
You have to configure a profile with these new rules.
We can see that you haven't a specific profile for creedengo, or the "Sonar Way" contains only native rules an not creedengo rules.
To explain it, you already have a FAQ for this point, please see FAQ
Lats thing that we can see in your last screenshot is the top message "Embedded database, ..." : this message imply that your are using a temporary SonarQube, isn't it ? if yes, is it a local Sonarqube ? Why do you use a temporary SonarQube instance ? for development or testing ?

Let me now if you have some other questions.

[jonatanivanovfan]

Hello @springboot-guru ,

Just bump into this.

I tried what @dedece35 said and it works. I think you can close this issue.

With that said, in the doc, it mentions:

launch followed command : ./install_profile.sh <MY_SONAR_PORT> <MY_SONAR_TOKEN>

This works for when the sonarqube is in localhost.
Is there a way to improve the doc mentioning when the sonarqube instance in not in localhost? Many time, the sonarqube host is located at https://some-company.com with custom port.

It would be great if the doc can say something like:

If your sonarqube instance is a localhost at port 9000, please run launch followed command : ./install_profile.sh <MY_SONAR_PORT> <MY_SONAR_TOKEN>

And if you sonarqube instance is within a custom url, custom port, please use:

Something like this