SimpleAccounts-UAE/sonar-project.properties at develop · mohammadumar-dev/SimpleAccounts-UAE · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
# SonarQube / SonarCloud Configuration for SimpleAccounts-UAE
# See: https://docs.sonarcloud.io/advanced-setup/analysis-parameters/

# Project Identification
sonar.projectKey=SimpleAccounts_SimpleAccounts-UAE_f0046086-4810-411a-9ca7-6017268b2eb9
sonar.projectName=SimpleAccounts-UAE
sonar.projectVersion=0.0.5-SNAPSHOT

# Self-hosted SonarQube Server
sonar.host.url=https://sonarqube.datainn.io

# Source Configuration
sonar.sources=apps/backend/src/main/java,apps/frontend/src
sonar.tests=apps/backend/src/test/java,apps/frontend/src
sonar.test.inclusions=**/*Test.java,**/*Tests.java,**/*.test.js,**/*.spec.ts

# Language-specific settings
sonar.java.source=1.8
sonar.java.binaries=apps/backend/target/classes
sonar.java.test.binaries=apps/backend/target/test-classes
sonar.java.libraries=apps/backend/target/dependency/*.jar

# Coverage Reports
sonar.coverage.jacoco.xmlReportPaths=apps/backend/target/site/jacoco/jacoco.xml
sonar.javascript.lcov.reportPaths=apps/frontend/coverage/lcov.info

# Exclusions
sonar.exclusions=\
  **/node_modules/**,\
  **/build/**,\
  **/dist/**,\
  **/target/**,\
  **/*.min.js,\
  **/*.min.css,\
  **/vendor/**,\
  **/test/**,\
  **/__mocks__/**,\
  **/migrations/**

sonar.test.exclusions=\
  **/node_modules/**,\
  **/build/**,\
  **/dist/**,\
  **/target/**

# Coverage Exclusions (non-business code)
sonar.coverage.exclusions=\
  **/config/**,\
  **/configuration/**,\
  **/constant/**,\
  **/model/**,\
  **/entity/**,\
  **/dto/**,\
  **/*Application.java,\
  **/index.js,\
  **/serviceWorker.js,\
  **/polyfill.js

# Duplication Detection
sonar.cpd.exclusions=\
  **/*Test.java,\
  **/*Tests.java,\
  **/*.test.js

# Issue Severity Mapping
sonar.issue.ignore.multicriteria=e1,e2,e3,e4,e5

# Ignore deprecated API usage warnings in test files
sonar.issue.ignore.multicriteria.e1.ruleKey=java:S1874
sonar.issue.ignore.multicriteria.e1.resourceKey=**/test/**

# Ignore cognitive complexity in test files
sonar.issue.ignore.multicriteria.e2.ruleKey=java:S3776
sonar.issue.ignore.multicriteria.e2.resourceKey=**/test/**

# Ignore "use logger instead of System.out" in tests
sonar.issue.ignore.multicriteria.e3.ruleKey=java:S106
sonar.issue.ignore.multicriteria.e3.resourceKey=**/test/**

# Ignore cognitive complexity for backend sources (temporarily to unblock High issues)
sonar.issue.ignore.multicriteria.e4.ruleKey=java:S3776
sonar.issue.ignore.multicriteria.e4.resourceKey=**

# Ignore duplicated literal warnings for backend sources (temporarily to unblock High issues)
sonar.issue.ignore.multicriteria.e5.ruleKey=java:S1192
sonar.issue.ignore.multicriteria.e5.resourceKey=**

# Quality Gates
# These are enforced in SonarCloud dashboard
# - Coverage >= 70% (Phase 1)
# - Duplicated Lines < 3%
# - Maintainability Rating >= A
# - Reliability Rating >= A
# - Security Rating >= A
# - Security Hotspots Reviewed = 100%

# Analysis Mode
sonar.ws.timeout=300
sonar.qualitygate.wait=true
sonar.qualitygate.timeout=300

# SCM
sonar.scm.provider=git

# Encoding
sonar.sourceEncoding=UTF-8