You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@solr.apache.org by David Smiley <ds...@apache.org> on 2026/05/23 15:43:26 UTC
Sonar for static analysis
I'd like to pursue enabling Sonar for static code analysis. My last job
used it as well as my current one does too, although I don't claim to be
super familiar with it at the moment. It's an offering of the ASF:
https://cwiki.apache.org/confluence/display/INFRA/SonarCloud+for+ASF+projects
If it doesn't work out, we can always disable it.
At the moment I'm looking for at least one other interested committer to
register in SonarQube (click the GitHub button on log-in; no new password,
no use of ASF password).
http://sonarcloud.io/
~ David Smiley
Apache Lucene/Solr Search Developer
http://www.linkedin.com/in/davidwsmiley
Re: Sonar for static analysis
Posted by David Smiley <ds...@apache.org>.
FYI Infra ticket: https://issues.apache.org/jira/browse/INFRA-28045
On Wed, May 27, 2026 at 5:40 PM Jan Høydahl <ja...@cominvent.com> wrote:
> I have created a sonar account with my github (janhoy), so feel free to
> put my name on the list.
>
> Jan
>
> > 27. mai 2026 kl. 22:13 skrev David Smiley <ds...@apache.org>:
> >
> > Jalaz,
> >
> > What you do in your fork is up to you. My message concerns the official
> > Solr repo. For the Apache Solr project to use Sonar, two committers that
> > have GitHub IDs must register there, then I can continue with the
> > onboarding. I'm looking for an additional committer. No obligation of
> > effort is implied here... but _ideally_ someone who is interested and/or
> > has experience.
> >
> > Aditya,
> >
> > Yes, AI written code is what's motivating me :-) The more
> > automatic/technical guardrails we have, the better.
> >
> > On Tue, May 26, 2026 at 12:58 PM Jalaz Kumar <ja...@gmail.com>
> > wrote:
> >
> >> Hello David, I am interested to assist here.
> >>
> >> I tried registering, the onboarding process to Sonarcloud looks pretty
> >> straightforward. I was able to set the Github Actions of Sonar Analysis
> up
> >> in my fork. Anything specific that we are looking for here?
> >>
> >>
> >> On Sat, May 23, 2026 at 9:13 PM David Smiley <ds...@apache.org>
> wrote:
> >>
> >>> I'd like to pursue enabling Sonar for static code analysis. My last
> job
> >>> used it as well as my current one does too, although I don't claim to
> be
> >>> super familiar with it at the moment. It's an offering of the ASF:
> >>>
> >>>
> >>>
> >>
> https://cwiki.apache.org/confluence/display/INFRA/SonarCloud+for+ASF+projects
> >>>
> >>> If it doesn't work out, we can always disable it.
> >>>
> >>> At the moment I'm looking for at least one other interested committer
> to
> >>> register in SonarQube (click the GitHub button on log-in; no new
> >> password,
> >>> no use of ASF password).
> >>> http://sonarcloud.io/
> >>>
> >>> ~ David Smiley
> >>> Apache Lucene/Solr Search Developer
> >>> http://www.linkedin.com/in/davidwsmiley
> >>>
> >>
> >>
> >> --
> >> Jalaz Kumar
> >>
> >> Contact: 9882552289
> >>
>
>
Re: Sonar for static analysis
Posted by Jan Høydahl <ja...@cominvent.com>.
I have created a sonar account with my github (janhoy), so feel free to put my name on the list.
Jan
> 27. mai 2026 kl. 22:13 skrev David Smiley <ds...@apache.org>:
>
> Jalaz,
>
> What you do in your fork is up to you. My message concerns the official
> Solr repo. For the Apache Solr project to use Sonar, two committers that
> have GitHub IDs must register there, then I can continue with the
> onboarding. I'm looking for an additional committer. No obligation of
> effort is implied here... but _ideally_ someone who is interested and/or
> has experience.
>
> Aditya,
>
> Yes, AI written code is what's motivating me :-) The more
> automatic/technical guardrails we have, the better.
>
> On Tue, May 26, 2026 at 12:58 PM Jalaz Kumar <ja...@gmail.com>
> wrote:
>
>> Hello David, I am interested to assist here.
>>
>> I tried registering, the onboarding process to Sonarcloud looks pretty
>> straightforward. I was able to set the Github Actions of Sonar Analysis up
>> in my fork. Anything specific that we are looking for here?
>>
>>
>> On Sat, May 23, 2026 at 9:13 PM David Smiley <ds...@apache.org> wrote:
>>
>>> I'd like to pursue enabling Sonar for static code analysis. My last job
>>> used it as well as my current one does too, although I don't claim to be
>>> super familiar with it at the moment. It's an offering of the ASF:
>>>
>>>
>>>
>> https://cwiki.apache.org/confluence/display/INFRA/SonarCloud+for+ASF+projects
>>>
>>> If it doesn't work out, we can always disable it.
>>>
>>> At the moment I'm looking for at least one other interested committer to
>>> register in SonarQube (click the GitHub button on log-in; no new
>> password,
>>> no use of ASF password).
>>> http://sonarcloud.io/
>>>
>>> ~ David Smiley
>>> Apache Lucene/Solr Search Developer
>>> http://www.linkedin.com/in/davidwsmiley
>>>
>>
>>
>> --
>> Jalaz Kumar
>>
>> Contact: 9882552289
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@solr.apache.org
For additional commands, e-mail: dev-help@solr.apache.org
Re: Sonar for static analysis
Posted by David Smiley <ds...@apache.org>.
Jalaz,
What you do in your fork is up to you. My message concerns the official
Solr repo. For the Apache Solr project to use Sonar, two committers that
have GitHub IDs must register there, then I can continue with the
onboarding. I'm looking for an additional committer. No obligation of
effort is implied here... but _ideally_ someone who is interested and/or
has experience.
Aditya,
Yes, AI written code is what's motivating me :-) The more
automatic/technical guardrails we have, the better.
On Tue, May 26, 2026 at 12:58 PM Jalaz Kumar <ja...@gmail.com>
wrote:
> Hello David, I am interested to assist here.
>
> I tried registering, the onboarding process to Sonarcloud looks pretty
> straightforward. I was able to set the Github Actions of Sonar Analysis up
> in my fork. Anything specific that we are looking for here?
>
>
> On Sat, May 23, 2026 at 9:13 PM David Smiley <ds...@apache.org> wrote:
>
> > I'd like to pursue enabling Sonar for static code analysis. My last job
> > used it as well as my current one does too, although I don't claim to be
> > super familiar with it at the moment. It's an offering of the ASF:
> >
> >
> >
> https://cwiki.apache.org/confluence/display/INFRA/SonarCloud+for+ASF+projects
> >
> > If it doesn't work out, we can always disable it.
> >
> > At the moment I'm looking for at least one other interested committer to
> > register in SonarQube (click the GitHub button on log-in; no new
> password,
> > no use of ASF password).
> > http://sonarcloud.io/
> >
> > ~ David Smiley
> > Apache Lucene/Solr Search Developer
> > http://www.linkedin.com/in/davidwsmiley
> >
>
>
> --
> Jalaz Kumar
>
> Contact: 9882552289
>
Re: Sonar for static analysis
Posted by Aditya Parikh <ad...@gmail.com>.
This would be a critical initiative as code gets increasingly written by
AI.
Thanks,
Aditya
On Tue, May 26, 2026 at 12:58 PM Jalaz Kumar <ja...@gmail.com>
wrote:
> Hello David, I am interested to assist here.
>
> I tried registering, the onboarding process to Sonarcloud looks pretty
> straightforward. I was able to set the Github Actions of Sonar Analysis up
> in my fork. Anything specific that we are looking for here?
>
>
> On Sat, May 23, 2026 at 9:13 PM David Smiley <ds...@apache.org> wrote:
>
> > I'd like to pursue enabling Sonar for static code analysis. My last job
> > used it as well as my current one does too, although I don't claim to be
> > super familiar with it at the moment. It's an offering of the ASF:
> >
> >
> >
> https://cwiki.apache.org/confluence/display/INFRA/SonarCloud+for+ASF+projects
> >
> > If it doesn't work out, we can always disable it.
> >
> > At the moment I'm looking for at least one other interested committer to
> > register in SonarQube (click the GitHub button on log-in; no new
> password,
> > no use of ASF password).
> > http://sonarcloud.io/
> >
> > ~ David Smiley
> > Apache Lucene/Solr Search Developer
> > http://www.linkedin.com/in/davidwsmiley
> >
>
>
> --
> Jalaz Kumar
>
> Contact: 9882552289
>
Re: Sonar for static analysis
Posted by Jalaz Kumar <ja...@gmail.com>.
Hello David, I am interested to assist here.
I tried registering, the onboarding process to Sonarcloud looks pretty
straightforward. I was able to set the Github Actions of Sonar Analysis up
in my fork. Anything specific that we are looking for here?
On Sat, May 23, 2026 at 9:13 PM David Smiley <ds...@apache.org> wrote:
> I'd like to pursue enabling Sonar for static code analysis. My last job
> used it as well as my current one does too, although I don't claim to be
> super familiar with it at the moment. It's an offering of the ASF:
>
>
> https://cwiki.apache.org/confluence/display/INFRA/SonarCloud+for+ASF+projects
>
> If it doesn't work out, we can always disable it.
>
> At the moment I'm looking for at least one other interested committer to
> register in SonarQube (click the GitHub button on log-in; no new password,
> no use of ASF password).
> http://sonarcloud.io/
>
> ~ David Smiley
> Apache Lucene/Solr Search Developer
> http://www.linkedin.com/in/davidwsmiley
>
--
Jalaz Kumar
Contact: 9882552289