當(dāng)前位置：首頁(yè) > 编程资源 > 编程问答 >内容正文

编程问答

Sonar 质量扫描的输出日志--对应源码的跟踪（一）{源码解析sonar-scanner-maven3.2}

發(fā)布時(shí)間：2023/12/19 编程问答 26 豆豆

生活随笔收集整理的這篇文章主要介紹了 Sonar 质量扫描的输出日志--对应源码的跟踪（一）{源码解析sonar-scanner-maven3.2} 小編覺(jué)得挺不錯(cuò)的,現(xiàn)在分享給大家,幫大家做個(gè)參考.

整個(gè)包的類目錄：

類文件并不是很多，主入口類ScannerBootstrapper

package org.sonarsource.scanner.maven.bootstrap;import java.io.IOException; import java.util.List; import java.util.Properties; import org.apache.maven.artifact.versioning.ArtifactVersion; import org.apache.maven.artifact.versioning.DefaultArtifactVersion; import org.apache.maven.execution.MavenSession; import org.apache.maven.plugin.MojoExecutionException; import org.apache.maven.plugin.logging.Log; import org.apache.maven.project.MavenProject; import org.sonarsource.scanner.api.EmbeddedScanner; import org.sonarsource.scanner.maven.ExtensionsFactory;/*** Configure properties and bootstrap using SonarQube scanner API*/ public class ScannerBootstrapper {private final Log log;private final MavenSession session;private final EmbeddedScanner scanner;private final MavenProjectConverter mavenProjectConverter;private final ExtensionsFactory extensionsFactory;private String serverVersion;private PropertyDecryptor propertyDecryptor;public ScannerBootstrapper(Log log, MavenSession session, EmbeddedScanner scanner, MavenProjectConverter mavenProjectConverter, ExtensionsFactory extensionsFactory,PropertyDecryptor propertyDecryptor) {this.log = log;this.session = session;this.scanner = scanner;this.mavenProjectConverter = mavenProjectConverter;this.extensionsFactory = extensionsFactory;this.propertyDecryptor = propertyDecryptor;}public void execute() throws IOException, MojoExecutionException {try {applyMasks();scanner.start();serverVersion = scanner.serverVersion();checkSQVersion();if (isVersionPriorTo5Dot2()) {// for these versions, global properties and extensions are only applied when calling runAnalisys()if (supportsNewDependencyProperty()) {scanner.addExtensions(extensionsFactory.createExtensionsWithDependencyProperty().toArray());} else {scanner.addExtensions(extensionsFactory.createExtensions().toArray());}}if (log.isDebugEnabled()) {scanner.setGlobalProperty("sonar.verbose", "true");}scanner.runAnalysis(collectProperties());scanner.stop();} catch (Exception e) {throw ExceptionHandling.handle(e, log);}}private void applyMasks() {// Exclude log implementation to not conflict with Maven 3.1 logging implscanner.mask("org.slf4j.LoggerFactory");// Include slf4j Logger that is exposed by some Sonar componentsscanner.unmask("org.slf4j.Logger");scanner.unmask("org.slf4j.ILoggerFactory");// MSONAR-122scanner.unmask("org.slf4j.Marker");// Exclude other slf4j classes// .unmask("org.slf4j.impl.")scanner.mask("org.slf4j.");// Exclude logbackscanner.mask("ch.qos.logback.");scanner.mask("org.sonar.");// Guava is not the same version in SonarQube classloaderscanner.mask("com.google.common");// Include everything else (we need to unmask all extensions that might be passed to the batch)scanner.unmask("");}private Properties collectProperties()throws MojoExecutionException {List<MavenProject> sortedProjects = session.getProjects();MavenProject topLevelProject = null;for (MavenProject project : sortedProjects) {if (project.isExecutionRoot()) {topLevelProject = project;break;}}if (topLevelProject == null) {throw new IllegalStateException("Maven session does not declare a top level project");}Properties props = mavenProjectConverter.configure(sortedProjects, topLevelProject, session.getUserProperties());props.putAll(propertyDecryptor.decryptProperties(props));return props;}private void checkSQVersion() {if (serverVersion != null) {log.info("SonarQube version: " + serverVersion);}if (isVersionPriorTo4Dot5()) {log.warn("With SonarQube prior to 4.5, it is recommended to use maven-sonar-plugin 2.6");}}boolean isVersionPriorTo4Dot5() {if (serverVersion == null) {return true;}ArtifactVersion artifactVersion = new DefaultArtifactVersion(serverVersion);if (artifactVersion.getMajorVersion() < 4) {return true;}return artifactVersion.getMajorVersion() == 4 && artifactVersion.getMinorVersion() < 5;}private boolean supportsNewDependencyProperty() {return !isVersionPriorTo5Dot0();}boolean isVersionPriorTo5Dot2() {if (serverVersion == null) {return true;}ArtifactVersion artifactVersion = new DefaultArtifactVersion(serverVersion);if (artifactVersion.getMajorVersion() < 5) {return true;}return artifactVersion.getMajorVersion() == 5 && artifactVersion.getMinorVersion() < 2;}boolean isVersionPriorTo5Dot0() {if (serverVersion == null) {return true;}ArtifactVersion artifactVersion = new DefaultArtifactVersion(serverVersion);return artifactVersion.getMajorVersion() < 5;} }

maven-sonar-scanner-3.2 pom文件：

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"><modelVersion>4.0.0</modelVersion><parent><groupId>org.sonarsource.parent</groupId><artifactId>parent</artifactId><version>36</version><relativePath /></parent><groupId>org.sonarsource.scanner.maven</groupId><artifactId>sonar-maven-plugin</artifactId><version>3.2</version><packaging>maven-plugin</packaging><name>SonarQube Scanner for Maven</name><description>Trigger SonarQube analysis on Maven projects</description><inceptionYear>2009</inceptionYear><licenses><license><name>GNU LGPL 3</name><url>http://www.gnu.org/licenses/lgpl.txt</url><distribution>repo</distribution></license></licenses><developers><developer><id>olamy</id><name>Olivier Lamy</name><email>olamy@apache.org</email><timezone>+1</timezone></developer><developer><id>godin</id><name>Evgeny Mandrikov</name><email>mandrikov@gmail.com</email><timezone>+3</timezone></developer><developer><id>simon.brandhof</id><name>Simon Brandhof</name><email>simon.brandhof@gmail.com</email><timezone>+1</timezone></developer><developer><id>henryju</id><name>Julien Henry</name><email>henryju@yahoo.fr</email><timezone>+1</timezone></developer></developers><prerequisites><maven>3.0</maven></prerequisites><scm><connection>scm:git:https://github.com/SonarSource/sonar-scanner-maven.git</connection><developerConnection>scm:git:ssh://git@github.com/SonarSource/sonar-scanner-maven.git</developerConnection><url>https://github.com/SonarSource/sonar-scanner-maven</url><tag>3.2</tag></scm><issueManagement><system>JIRA</system><url>http://jira.sonarsource.com/browse/MSONAR</url></issueManagement><properties><mojo.java.target>1.7</mojo.java.target><mavenVersion>3.3.9</mavenVersion><sonar.exclusions>src/main/java/org/apache/maven/shared/dependency/tree/DependencyTreeResolutionListener.java,target/generated-sources/**/*</sonar.exclusions><gitRepositoryName>sonar-scanner-maven</gitRepositoryName></properties><dependencies><dependency><groupId>org.apache.maven</groupId><artifactId>maven-plugin-api</artifactId><version>${mavenVersion}</version><scope>provided</scope></dependency><dependency><groupId>org.apache.maven</groupId><artifactId>maven-model</artifactId><version>${mavenVersion}</version><scope>provided</scope></dependency><dependency><groupId>org.apache.maven</groupId><artifactId>maven-compat</artifactId><version>${mavenVersion}</version><scope>provided</scope></dependency><dependency><groupId>org.apache.maven</groupId><artifactId>maven-artifact</artifactId><version>${mavenVersion}</version><scope>provided</scope></dependency><dependency><groupId>org.apache.maven</groupId><artifactId>maven-core</artifactId><version>${mavenVersion}</version><scope>provided</scope></dependency><dependency><groupId>org.apache.maven.shared</groupId><artifactId>maven-dependency-tree</artifactId><version>2.2</version></dependency><dependency><groupId>org.sonatype.plexus</groupId><artifactId>plexus-sec-dispatcher</artifactId><version>1.4</version></dependency><dependency><groupId>org.codehaus.plexus</groupId><artifactId>plexus-utils</artifactId><version>3.0.22</version></dependency><dependency><groupId>org.apache.maven.plugin-tools</groupId><artifactId>maven-plugin-annotations</artifactId><version>3.4</version><scope>provided</scope></dependency><dependency><groupId>org.sonarsource.scanner.api</groupId><artifactId>sonar-scanner-api</artifactId><version>2.8</version></dependency><dependency><groupId>commons-lang</groupId><artifactId>commons-lang</artifactId><version>2.6</version></dependency><dependency><groupId>com.google.code.findbugs</groupId><artifactId>jsr305</artifactId><version>2.0.3</version></dependency><dependency><groupId>junit</groupId><artifactId>junit</artifactId><version>4.12</version><scope>test</scope></dependency><dependency><groupId>org.mockito</groupId><artifactId>mockito-all</artifactId><version>1.9.5</version><scope>test</scope></dependency><dependency><groupId>org.assertj</groupId><artifactId>assertj-core</artifactId><version>2.3.0</version><scope>test</scope></dependency><dependency><groupId>org.skyscreamer</groupId><artifactId>jsonassert</artifactId><version>1.2.3</version><scope>test</scope></dependency><dependency><groupId>org.apache.maven.plugin-testing</groupId><artifactId>maven-plugin-testing-harness</artifactId><version>3.3.0</version><scope>test</scope></dependency><dependency><groupId>org.mortbay.jetty</groupId><artifactId>jetty</artifactId><version>6.1.25</version><scope>test</scope></dependency></dependencies><build><plugins><plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-plugin-plugin</artifactId><configuration><skipErrorNoDescriptorsFound>true</skipErrorNoDescriptorsFound></configuration><executions><execution><id>mojo-descriptor</id><goals><goal>descriptor</goal></goals></execution><execution><id>help-goal</id><goals><goal>helpmojo</goal></goals></execution></executions></plugin> <plugin><groupId>org.codehaus.plexus</groupId><artifactId>plexus-component-metadata</artifactId><version>1.7</version><executions><execution><goals><goal>generate-metadata</goal></goals></execution></executions></plugin><plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-release-plugin</artifactId><configuration><goals>deploy site site:stage</goals></configuration></plugin><plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-site-plugin</artifactId><version>3.4</version><executions><execution><id>stage-for-scm-publish</id><phase>post-site</phase><goals><goal>stage</goal></goals></execution></executions></plugin><plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-scm-publish-plugin</artifactId><version>1.1</version><configuration><scmBranch>gh-pages</scmBranch></configuration><executions><execution><id>scm-publish</id><phase>site-deploy</phase><goals><goal>publish-scm</goal></goals></execution></executions></plugin></plugins></build><reporting><plugins><plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-plugin-plugin</artifactId><version>3.4</version><configuration><requirements><jdk>${mojo.java.target}</jdk></requirements></configuration></plugin><plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-project-info-reports-plugin</artifactId><version>2.8.1</version><reportSets><reportSet><reports><report>dependency-info</report><report>index</report><report>issue-tracking</report><report>project-team</report><report>scm</report><report>summary</report></reports></reportSet></reportSets></plugin></plugins></reporting><distributionManagement><site><id>github</id><name>GitHub</name><url>scm:git:git@github.com:SonarSource/sonar-scanner-maven.git</url></site></distributionManagement> </project>

從上面的pom 依賴可以看到 maven-sonar-scanner 依賴于sonar-scanner-2.8！！！！

首先調(diào)用scanner.start(); ->private final EmbeddedScanner scanner;->org.sonarsource.scanner.api.EmbeddedScanner;

EmbeddedScanner來(lái)自sonar-scanner-api-2.8.jar?

EmbeddedScanner 代碼：

public class EmbeddedScanner {private final IsolatedLauncherFactory launcherFactory;private IsolatedLauncher launcher;private final LogOutput logOutput;private final Properties globalProperties = new Properties();private final List<Object> extensions = new ArrayList<>();private final Logger logger;private final Set<String> classloaderMask = new HashSet<>();private final Set<String> classloaderUnmask = new HashSet<>();EmbeddedScanner(IsolatedLauncherFactory bl, Logger logger, LogOutput logOutput) {this.logger = logger;this.launcherFactory = bl;this.logOutput = logOutput;this.classloaderUnmask.add("org.sonarsource.scanner.api.internal.batch.");}public static EmbeddedScanner create(final LogOutput logOutput) {Logger logger = new LoggerAdapter(logOutput);return new EmbeddedScanner(new IsolatedLauncherFactory(logger), logger, logOutput);}public Properties globalProperties() {Properties clone = new Properties();clone.putAll(globalProperties);return clone;}public EmbeddedScanner unmask(String fqcnPrefix) {checkLauncherDoesntExist();classloaderUnmask.add(fqcnPrefix);return this;}public EmbeddedScanner mask(String fqcnPrefix) {checkLauncherDoesntExist();classloaderMask.add(fqcnPrefix);return this;}/*** Declare Sonar properties, for example sonar.projectKey=foo.* These might be used at different stages (on {@link #start() or #runAnalysis(Properties)}, depending on the * property and SQ version.**/public EmbeddedScanner addGlobalProperties(Properties p) {globalProperties.putAll(p);return this;}/*** Declare a SonarQube property.* These might be used at different stages (on {@link #start() or #runAnalysis(Properties)}, depending on the * property and SQ version.** @see ScannerProperties* @see ScanProperties*/public EmbeddedScanner setGlobalProperty(String key, String value) {globalProperties.setProperty(key, value);return this;}public String globalProperty(String key, @Nullable String defaultValue) {return globalProperties.getProperty(key, defaultValue);}/*** User-agent used in the HTTP requests to the SonarQube server*/public EmbeddedScanner setApp(String app, String version) {setGlobalProperty(InternalProperties.SCANNER_APP, app);setGlobalProperty(InternalProperties.SCANNER_APP_VERSION, version);return this;}public String app() {return globalProperty(InternalProperties.SCANNER_APP, null);}/*** Add extensions to the batch's object container.* Only supported until SQ 5.1. For more recent versions, an exception is thrown * @param objs*/public EmbeddedScanner addExtensions(Object... objs) {checkLauncherExists();if (VersionUtils.isAtLeast52(launcher.getVersion())) {throw new IllegalStateException("not supported in current SonarQube version: " + launcher.getVersion());}extensions.addAll(Arrays.asList(objs));return this;}public String appVersion() {return globalProperty(InternalProperties.SCANNER_APP_VERSION, null);}/*** Launch an analysis.* Runner must have been started - see {@link #start()}.*/public void runAnalysis(Properties analysisProperties) {checkLauncherExists();Properties copy = new Properties();copy.putAll(analysisProperties);initAnalysisProperties(copy);doExecute(copy);}public void start() {initGlobalDefaultValues();doStart();}/*** Stops the batch.* Only supported starting in SQ 5.2. For older versions, this is a no-op.*/public void stop() {checkLauncherExists();doStop();}public String serverVersion() {checkLauncherExists();return launcher.getVersion();}/*** @deprecated since 2.5 use {@link #start()}, {@link #runAnalysis(Properties)} and then {@link #stop()}*/@Deprecatedpublic final void execute() {start();runAnalysis(new Properties());stop();}private void initGlobalDefaultValues() {setGlobalDefaultValue(ScannerProperties.HOST_URL, "http://localhost:9000");setGlobalDefaultValue(InternalProperties.SCANNER_APP, "SonarQubeScanner");setGlobalDefaultValue(InternalProperties.SCANNER_APP_VERSION, ScannerApiVersion.version());}private void initAnalysisProperties(Properties p) {initSourceEncoding(p);new Dirs(logger).init(p);}void initSourceEncoding(Properties p) {boolean onProject = Utils.taskRequiresProject(p);if (onProject) {String sourceEncoding = p.getProperty(ScanProperties.PROJECT_SOURCE_ENCODING, "");boolean platformDependent = false;if ("".equals(sourceEncoding)) {sourceEncoding = Charset.defaultCharset().name();platformDependent = true;p.setProperty(ScanProperties.PROJECT_SOURCE_ENCODING, sourceEncoding);}logger.info("Default locale: \"" + Locale.getDefault() + "\", source code encoding: \"" + sourceEncoding + "\""+ (platformDependent ? " (analysis is platform dependent)" : ""));}}private void setGlobalDefaultValue(String key, String value) {if (!globalProperties.containsKey(key)) {setGlobalProperty(key, value);}}protected void doStart() {checkLauncherDoesntExist();ClassloadRules rules = new ClassloadRules(classloaderMask, classloaderUnmask);launcher = launcherFactory.createLauncher(globalProperties(), rules);if (VersionUtils.isAtLeast52(launcher.getVersion())) {launcher.start(globalProperties(), (formattedMessage, level) -> logOutput.log(formattedMessage, LogOutput.Level.valueOf(level.name())));}}protected void doStop() {if (VersionUtils.isAtLeast52(launcher.getVersion())) {launcher.stop();launcher = null;}}protected void doExecute(Properties analysisProperties) {if (VersionUtils.isAtLeast52(launcher.getVersion())) {launcher.execute(analysisProperties);} else {Properties prop = new Properties();prop.putAll(globalProperties());prop.putAll(analysisProperties);launcher.executeOldVersion(prop, extensions);}}private void checkLauncherExists() {if (launcher == null) {throw new IllegalStateException("not started");}}private void checkLauncherDoesntExist() {if (launcher != null) {throw new IllegalStateException("already started");}} }

這個(gè)EmbeddedScanner 中l(wèi)aucher 是IsolatedLauncher 這個(gè)類，這個(gè)類是一個(gè)類加載器類，用來(lái)加載下載的類文件

/*** Special {@link java.net.URLClassLoader} to execute batch, which restricts loading from parent.*/ class IsolatedClassloader extends URLClassLoader {private final ClassloadRules rules;/*** The parent classloader is used only for loading classes and resources in unmasked packages*/IsolatedClassloader(ClassLoader parent, ClassloadRules rules) {super(new URL[0], parent);this.rules = rules;}void addFiles(List<File> files) {try {for (File file : files) {addURL(file.toURI().toURL());}} catch (MalformedURLException e) {throw new IllegalStateException("Fail to create classloader", e);}}/*** Same behavior as in {@link java.net.URLClassLoader#loadClass(String, boolean)}, except loading from parent.*/@Overrideprotected synchronized Class<?> loadClass(String name, boolean resolve) throws ClassNotFoundException {// First, check if the class has already been loadedClass<?> c = findLoadedClass(name);if (c == null) {try {// Load from parentif (getParent() != null && rules.canLoad(name)) {c = getParent().loadClass(name);} else {// Load from system// I don't know for other vendors, but for Oracle JVM :// - ClassLoader.getSystemClassLoader() is sun.misc.Launcher$AppClassLoader. It contains app classpath.// - ClassLoader.getSystemClassLoader().getParent() is sun.misc.Launcher$ExtClassLoader. It contains core JVMClassLoader systemClassLoader = getSystemClassLoader();if (systemClassLoader.getParent() != null) {systemClassLoader = systemClassLoader.getParent();}c = systemClassLoader.loadClass(name);}} catch (ClassNotFoundException e) {// If still not found, then invoke findClass in order// to find the class.c = findClass(name);}}if (resolve) {resolveClass(c);}return c;}/*** Unlike {@link java.net.URLClassLoader#getResource(String)} don't return resource from parent.* See http://jira.codehaus.org/browse/SONAR-2276*/@Overridepublic URL getResource(String name) {return findResource(name);}/*** Unlike {@link java.net.URLClassLoader#getResources(String)} don't return resources from parent.* See http://jira.codehaus.org/browse/SONAR-2276*/@Overridepublic Enumeration<URL> getResources(String name) throws IOException {return findResources(name);}}

這個(gè)類中使用了工廠模式：

public class IsolatedLauncherFactory {static final String ISOLATED_LAUNCHER_IMPL = "org.sonarsource.scanner.api.internal.batch.BatchIsolatedLauncher";private final TempCleaning tempCleaning;private final String launcherImplClassName;private final Logger logger;/*** For unit tests*/IsolatedLauncherFactory(String isolatedLauncherClassName, TempCleaning tempCleaning, Logger logger) {this.tempCleaning = tempCleaning;this.launcherImplClassName = isolatedLauncherClassName;this.logger = logger;}public IsolatedLauncherFactory(Logger logger) {this(ISOLATED_LAUNCHER_IMPL, new TempCleaning(logger), logger);}private ClassLoader createClassLoader(List<File> jarFiles, ClassloadRules maskRules) {IsolatedClassloader classloader = new IsolatedClassloader(getClass().getClassLoader(), maskRules);classloader.addFiles(jarFiles);return classloader;}public IsolatedLauncher createLauncher(Properties props, ClassloadRules rules) {if (props.containsKey(InternalProperties.SCANNER_DUMP_TO_FILE) || props.containsKey(InternalProperties.SCANNER_DUMP_TO_FILE_DEPRECATED)) {String version = props.getProperty(InternalProperties.SCANNER_VERSION_SIMULATION);if (version == null) {version = "5.2";}return new SimulatedLauncher(version, logger);}ServerConnection serverConnection = ServerConnection.create(props, logger);JarDownloader jarDownloader = new JarDownloader(serverConnection, logger, props);return createLauncher(jarDownloader, rules);}IsolatedLauncher createLauncher(final JarDownloader jarDownloader, final ClassloadRules rules) {return AccessController.doPrivileged(new PrivilegedAction<IsolatedLauncher>() {@Overridepublic IsolatedLauncher run() {try {List<File> jarFiles = jarDownloader.download();logger.debug("Create isolated classloader...");ClassLoader cl = createClassLoader(jarFiles, rules);IsolatedLauncher objProxy = IsolatedLauncherProxy.create(cl, IsolatedLauncher.class, launcherImplClassName, logger);tempCleaning.clean();return objProxy;} catch (Exception e) {// Catch all other exceptions, which relates to reflectionthrow new ScannerException("Unable to execute SonarQube", e);}}});} }

IsolatedLauncherProxy代理類：

public class IsolatedLauncherProxy implements InvocationHandler {private final Object proxied;private final ClassLoader cl;private final Logger logger;private IsolatedLauncherProxy(ClassLoader cl, Object proxied, Logger logger) {this.cl = cl;this.proxied = proxied;this.logger = logger;}public static <T> T create(ClassLoader cl, Class<T> interfaceClass, String proxiedClassName, Logger logger) throws ReflectiveOperationException {Object proxied = createProxiedObject(cl, proxiedClassName);// interfaceClass needs to be loaded with a parent ClassLoader (common to both ClassLoaders)// In addition, Proxy.newProxyInstance checks if the target ClassLoader sees the same class as the one givenClass<?> loadedInterfaceClass = cl.loadClass(interfaceClass.getName());return (T) create(cl, proxied, loadedInterfaceClass, logger);}public static <T> T create(ClassLoader cl, Object proxied, Class<T> interfaceClass, Logger logger) {Class<?>[] c = {interfaceClass};return (T) Proxy.newProxyInstance(cl, c, new IsolatedLauncherProxy(cl, proxied, logger));}@Overridepublic Object invoke(Object proxy, Method method, Object[] args) throws Throwable {ClassLoader initialContextClassLoader = Thread.currentThread().getContextClassLoader();try {Thread.currentThread().setContextClassLoader(cl);logger.debug("Execution " + method.getName());return method.invoke(proxied, args);} catch (UndeclaredThrowableException | InvocationTargetException e) {throw unwrapException(e);} finally {Thread.currentThread().setContextClassLoader(initialContextClassLoader);}}private static Throwable unwrapException(Throwable e) {Throwable cause = e;while (cause.getCause() != null) {if (cause instanceof UndeclaredThrowableException || cause instanceof InvocationTargetException) {cause = cause.getCause();} else {break;}}return cause;}private static Object createProxiedObject(ClassLoader cl, String proxiedClassName) throws ClassNotFoundException, InstantiationException, IllegalAccessException {Class<?> proxiedClass = cl.loadClass(proxiedClassName);return proxiedClass.newInstance();} }

ClassloadRules類：

public class ClassloadRules {private final List<String> mask;private final List<String> unmask;public ClassloadRules(Set<String> maskRules, Set<String> unmaskRules) {this.mask = new ArrayList<>(maskRules);this.unmask = new ArrayList<>(unmaskRules);}public boolean canLoad(String className) {// if there is a tie -> block itreturn unmaskSize(className) > maskSize(className);}private int maskSize(String className) {return findBestMatch(mask, className);}private int unmaskSize(String className) {return findBestMatch(unmask, className);}private static int findBestMatch(List<String> list, String name) {// there can be a match of 0 ("")int bestMatch = -1;for (String s : list) {if (name.startsWith(s) && s.length() > bestMatch) {bestMatch = s.length();}}return bestMatch;} }

jar類：

class Jars {private final FileCache fileCache;private final ServerConnection connection;private final JarExtractor jarExtractor;private final Logger logger;Jars(ServerConnection conn, JarExtractor jarExtractor, Logger logger, Properties props) {this.logger = logger;this.fileCache = new FileCacheBuilder(logger).setUserHome(props.getProperty("sonar.userHome")).build();this.connection = conn;this.jarExtractor = jarExtractor;}/*** For unit tests*/Jars(FileCache fileCache, ServerConnection conn, JarExtractor jarExtractor, Logger logger) {this.logger = logger;this.fileCache = fileCache;this.connection = conn;this.jarExtractor = jarExtractor;}/*** For unit tests*/FileCache getFileCache() {return fileCache;}List<File> download() {List<File> files = new ArrayList<>();logger.debug("Extract sonar-scanner-api-batch in temp...");files.add(jarExtractor.extractToTemp("sonar-scanner-api-batch").toFile());files.addAll(downloadFiles());return files;}private List<File> downloadFiles() {try {List<File> files = new ArrayList<>();logger.debug("Get bootstrap index...");String libs = connection.downloadString("/batch_bootstrap/index");logger.debug("Get bootstrap completed");String[] lines = libs.split("[\r\n]+");BatchFileDownloader batchFileDownloader = new BatchFileDownloader(connection);for (String line : lines) {line = line.trim();if (!"".equals(line)) {String[] libAndHash = line.split("\\|");String filename = libAndHash[0];String hash = libAndHash.length > 0 ? libAndHash[1] : "";files.add(fileCache.get(filename, hash, batchFileDownloader));}}return files;} catch (Exception e) {throw new IllegalStateException("Fail to download libraries from server", e);}}static class BatchFileDownloader implements FileCache.Downloader {private final ServerConnection connection;BatchFileDownloader(ServerConnection conn) {this.connection = conn;}@Overridepublic void download(String filename, File toFile) throws IOException {connection.downloadFile(format("/batch/%s", filename), toFile.toPath());}} }

sonar分析階段執(zhí)行日志：

[INFO] --- sonar-maven-plugin:3.2:sonar (default-cli) @ pcaic-parent --- [INFO] User cache: /root/.sonar/cache 5.475: [GC (Metadata GC Threshold) [PSYoungGen: 124155K->16378K(212992K)] 125048K->20534K(337920K), 0.0249154 secs] [Times: user=0.08 sys=0.00, real=0.03 secs] 5.500: [Full GC (Metadata GC Threshold) [PSYoungGen: 16378K->0K(212992K)] [ParOldGen: 4156K->19951K(172032K)] 20534K->19951K(385024K), [Metaspace: 20709K->20709K(1069056K)], 0.1078064 secs] [Times: user=0.46 sys=0.01, real=0.11 secs] [INFO] Load global repositories [INFO] Load global repositories (done) | time=143ms [WARNING] Property 'sonar.jdbc.url' is not supported any more. It will be ignored. There is no longer any DB connection to the SQ database. [WARNING] Property 'sonar.jdbc.username' is not supported any more. It will be ignored. There is no longer any DB connection to the SQ database. [WARNING] Property 'sonar.jdbc.password' is not supported any more. It will be ignored. There is no longer any DB connection to the SQ database. [INFO] User cache: /root/.sonar/cache [INFO] Load plugins index [INFO] Load plugins index (done) | time=2ms [INFO] Plugin [l10nzh] defines 'l10nen' as base plugin. This metadata can be removed from manifest of l10n plugins since version 5.2. [INFO] SonarQube version: 6.2 7.243: [GC (Allocation Failure) [PSYoungGen: 196608K->21479K(318976K)] 216559K->73599K(491008K), 0.0467409 secs] [Times: user=0.14 sys=0.04, real=0.05 secs] [WARNING] Missing POM for com.suning.framework:snf-zk-client:jar:1.1.1 [WARNING] Missing POM for com.suning.framework:snf-zk-client:jar:1.1.1 8.358: [GC (Allocation Failure) [PSYoungGen: 318951K->25791K(394240K)] 371071K->77919K(566272K), 0.0259672 secs] [Times: user=0.11 sys=0.02, real=0.02 secs] [INFO] artifact org.jxls:jxls: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:jquery: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:angular: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:angular: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:eonasdan-bootstrap-datetimepicker: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:moment: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:moment: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:bootstrap: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:jquery: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:bootstrap: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:jquery: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:angular: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:codemirror: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:angular: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:angular: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:angular: checking for updates from suning_maven_repo [INFO] artifact org.webjars.bower:js-xlsx: checking for updates from suning_maven_repo 10.054: [GC (Allocation Failure) [PSYoungGen: 378047K->29227K(494080K)] 430175K->81362K(666112K), 0.0336199 secs] [Times: user=0.21 sys=0.02, real=0.04 secs] [INFO] Default locale: "zh_CN", source code encoding: "UTF-8" [INFO] Process project properties [INFO] Load project repositories [INFO] Load project repositories (done) | time=305ms 11.048: [GC (Metadata GC Threshold) [PSYoungGen: 125853K->36969K(494592K)] 177989K->89113K(666624K), 0.0228080 secs] [Times: user=0.09 sys=0.02, real=0.02 secs] 11.071: [Full GC (Metadata GC Threshold) [PSYoungGen: 36969K->0K(494592K)] [ParOldGen: 52143K->75639K(318976K)] 89113K->75639K(813568K), [Metaspace: 34292K->34292K(1081344K)], 0.1395758 secs] [Times: user=0.60 sys=0.03, real=0.14 secs] [INFO] Load quality profiles [INFO] Load quality profiles (done) | time=22ms [INFO] Load active rules [INFO] Load active rules (done) | time=647ms [INFO] Publish mode [INFO] ------------- Scan suning's pcids caic common 20180509 [INFO] Language is forced to java [INFO] Load server rules [INFO] Load server rules (done) | time=142ms [INFO] Initializer GenericCoverageSensor [INFO] Initializer GenericCoverageSensor (done) | time=1ms [INFO] Base dir: /data/jenkinsslave/workspace/pcids_caic20180509/pcaic-common [INFO] Working dir: /data/jenkinsslave/workspace/pcids_caic20180509/pcaic-common/target/sonar [INFO] Source paths: pom.xml, src/main/java [INFO] Source encoding: UTF-8, default locale: zh_CN [INFO] Index files [INFO] 47 files indexed [INFO] Quality profile for java: Sonarway54 [INFO] Sensor Lines Sensor [INFO] Sensor Lines Sensor (done) | time=17ms [INFO] Sensor JavaSquidSensor [INFO] Configured Java source version (sonar.java.source): 8 [INFO] JavaClasspath initialization [INFO] JavaClasspath initialization (done) | time=13ms [INFO] JavaTestClasspath initialization [INFO] JavaTestClasspath initialization (done) | time=3ms [INFO] Java Main Files AST scan [INFO] 47 source files to be analyzed [WARNING] Metric 'lines' is an internal metric computed by SonarQube. Provided value is ignored. 16.331: [GC (Allocation Failure) [PSYoungGen: 452608K->28914K(606208K)] 528247K->104581K(925184K), 0.0573675 secs] [Times: user=0.20 sys=0.02, real=0.06 secs] [INFO] [INFO] 47/47 source files have been analyzed Java Main Files AST scan (done) | time=3857ms [INFO] Java Test Files AST scan [INFO] 0 source files to be analyzed [INFO] Java Test Files AST scan (done) | time=0ms [INFO] Sensor JavaSquidSensor (done) | time=4341ms [INFO] [INFO] Sensor SCM Sensor 0/0 source files have been analyzed [INFO] Sensor SCM Sensor (done) | time=9ms [INFO] Sensor Coverage Report Import [INFO] Sensor Coverage Report Import (done) | time=0ms [INFO] Sensor Coverage Report Import [INFO] Sensor Coverage Report Import (done) | time=0ms [INFO] Sensor Unit Test Results Import [INFO] Sensor Unit Test Results Import (done) | time=0ms [INFO] Sensor FindBugs Sensor 18.146: [GC (Metadata GC Threshold) [PSYoungGen: 298260K->13640K(625152K)] 373927K->89315K(944128K), 0.0345552 secs] [Times: user=0.14 sys=0.01, real=0.04 secs] 18.181: [Full GC (Metadata GC Threshold) [PSYoungGen: 13640K->0K(625152K)] [ParOldGen: 75674K->81834K(407040K)] 89315K->81834K(1032192K), [Metaspace: 57175K->57175K(1099776K)], 0.3274191 secs] [Times: user=1.63 sys=0.02, real=0.33 secs] [INFO] Findbugs output report: /data/jenkinsslave/workspace/pcids_caic20180509/pcaic-common/target/sonar/findbugs-result.xml 23.374: [GC (Allocation Failure) [PSYoungGen: 580096K->34117K(734208K)] 661930K->115976K(1141248K), 0.0345130 secs] [Times: user=0.14 sys=0.01, real=0.04 secs] [INFO] Sensor FindBugs Sensor (done) | time=6416ms [INFO] Sensor SurefireSensor [INFO] parsing /data/jenkinsslave/workspace/pcids_caic20180509/pcaic-common/target/surefire-reports [INFO] Sensor SurefireSensor (done) | time=1ms [INFO] Sensor JaCoCoSensor [INFO] JaCoCoSensor: JaCoCo report not found : /data/jenkinsslave/workspace/pcids_caic20180509/pcaic-common/target/jacoco.exec [INFO] Sensor JaCoCoSensor (done) | time=0ms [INFO] Sensor JaCoCoItSensor [INFO] JaCoCoItSensor: JaCoCo IT report not found: /data/jenkinsslave/workspace/pcids_caic20180509/pcaic-common/target/jacoco-it.exec [INFO] Sensor JaCoCoItSensor (done) | time=0ms [INFO] Sensor JaCoCoOverallSensor [INFO] Sensor JaCoCoOverallSensor (done) | time=1ms [INFO] Sensor XmlFileSensor [INFO] Sensor XmlFileSensor (done) | time=0ms [INFO] Sensor Zero Coverage Sensor [INFO] Sensor Zero Coverage Sensor (done) | time=38ms [INFO] Sensor Code Colorizer Sensor [INFO] Sensor Code Colorizer Sensor (done) | time=2ms [INFO] Sensor CPD Block Indexer [INFO] JavaCpdBlockIndexer is used for java [INFO] Sensor CPD Block Indexer (done) | time=68ms

首先設(shè)置globalproperties:這是jenkins上配置的sonar 生成的：

jenkins上配置的這個(gè)sonar信息將要生成globalproperties

根據(jù)這個(gè)配置文件將要連接sonar web,然后將要在sonar上開啟分析的線程（是web 進(jìn)程中的一個(gè)線程還是 ce中的一個(gè)線程？有待于研究）

然后sonar 統(tǒng)計(jì) scanner 準(zhǔn)備就緒，然后scanner根據(jù)project中的sonar配置生成一個(gè)project properties

然后scanner 根據(jù)socket創(chuàng)建HTTPS連接，通過(guò)protocobuf協(xié)議和sonar engine 通信，下載，加載sonar 中engine工具類在jenkins上?scanner? jvm中執(zhí)行。

sonar-scanner-2.8 pom文件：從pom中可見(jiàn) scanner和sonar 中的代碼并沒(méi)有什么依賴關(guān)系，scanner只是網(wǎng)絡(luò)下載 sonar web 中相關(guān)的類和 rule,然后在scanner中的類加載器上加載執(zhí)行。

————————————————————————————————————————————

對(duì)于sonar-scanner.jar/sonar-runner.jar 其外殼就是一個(gè)腳本執(zhí)行jar, jar中有一個(gè)main類：

public class Main {private static final String SEPARATOR = "------------------------------------------------------------------------";private final Exit exit;private final Cli cli;private final Conf conf;private EmbeddedScanner runner;private ScannerFactory runnerFactory;private Logs logger;Main(Exit exit, Cli cli, Conf conf, ScannerFactory runnerFactory, Logs logger) {this.exit = exit;this.cli = cli;this.conf = conf;this.runnerFactory = runnerFactory;this.logger = logger;}public static void main(String[] args) {Logs logs = new Logs(System.out, System.err);Exit exit = new Exit();Cli cli = new Cli(exit, logs).parse(args);Main main = new Main(exit, cli, new Conf(cli, logs, System.getenv()), new ScannerFactory(logs), logs);main.execute();}void execute() {Stats stats = new Stats(logger).start();try {Properties p = conf.properties();checkSkip(p);configureLogging(p);init(p);runner.start();logger.info("SonarQube server " + runner.serverVersion());runAnalysis(stats, p);} catch (Exception e) {displayExecutionResult(stats, "FAILURE");showError("Error during SonarQube Scanner execution", e, cli.isDebugEnabled());exit.exit(Exit.ERROR);}runner.stop();exit.exit(Exit.SUCCESS);}private void checkSkip(Properties properties) {if ("true".equalsIgnoreCase(properties.getProperty(ScanProperties.SKIP))) {logger.info("SonarQube Scanner analysis skipped");exit.exit(Exit.SUCCESS);}}private void init(Properties p) throws IOException {SystemInfo.print(logger);if (cli.isDisplayVersionOnly()) {exit.exit(Exit.SUCCESS);}runner = runnerFactory.create(p);}private void configureLogging(Properties props) throws IOException {if ("true".equals(props.getProperty("sonar.verbose"))|| "DEBUG".equalsIgnoreCase(props.getProperty("sonar.log.level"))|| "TRACE".equalsIgnoreCase(props.getProperty("sonar.log.level"))) {logger.setDebugEnabled(true);}}private void runAnalysis(Stats stats, Properties p) {runner.runAnalysis(p);displayExecutionResult(stats, "SUCCESS");}private void displayExecutionResult(Stats stats, String resultMsg) {logger.info(SEPARATOR);logger.info("EXECUTION " + resultMsg);logger.info(SEPARATOR);stats.stop();logger.info(SEPARATOR);}private void showError(String message, Throwable e, boolean debug) {if (showStackTrace(e, debug)) {logger.error(message, e);} else {logger.error(message);logger.error(e.getMessage());String previousMsg = "";for (Throwable cause = e.getCause(); cause != null&& cause.getMessage() != null&& !cause.getMessage().equals(previousMsg); cause = cause.getCause()) {logger.error("Caused by: " + cause.getMessage());previousMsg = cause.getMessage();}}if (!cli.isDebugEnabled()) {logger.error("");suggestDebugMode();}}private static boolean showStackTrace(Throwable e, boolean debug) {// class not available at compile time (loaded by isolated classloader)return debug || !"org.sonar.api.utils.MessageException".equals(e.getClass().getName());}private void suggestDebugMode() {logger.error("Re-run SonarQube Scanner using the -X switch to enable full debug logging.");}}

獨(dú)立于maven的，是jenkins的插件。主要的工作類仍是EmbeddedScanner，來(lái)自

<groupId>org.sonarsource.scanner.cli</groupId><artifactId>sonar-scanner-cli</artifactId><version>2.8</version><packaging>jar</packaging><name>SonarQube Scanner</name><url>http://docs.sonarqube.org/display/SONAR/Analyzing+with+SonarQube+Scanner</url><inceptionYear>2011</inceptionYear>

直接集成的sonar-scanner-cli.jar,然后依靠腳本執(zhí)行的jar

sonar-scanner-cli-2.8.jar就是上面的講述的源代碼，大同小異。

總結(jié)

以上是生活随笔為你收集整理的Sonar 质量扫描的输出日志--对应源码的跟踪（一）{源码解析sonar-scanner-maven3.2}的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。

如果覺(jué)得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。

上一篇：早报：虎牙公布一季度财报腾讯音乐Q1营
下一篇： SpaceX已经成功我国征集空间站商业