sonar-project.properties

sonar.projectKey=vitali87_code-graph-rag
sonar.organization=vitali87
sonar.projectName=code-graph-rag

sonar.sources=codebase_rag
sonar.tests=codebase_rag/tests
# The embedded JVM trace agent is standalone Java tooling built by a separate
# JDK 24+ toolchain (not the Python product, not compiled in CI). SonarJava's
# defaults conflict with its required contracts -- `ClassFileTransformer`
# returns null to signal "no transform", the agent deliberately catches
# `Throwable` so an unparseable class loads uninstrumented, and `System.err`
# is the correct diagnostic channel for a `-javaagent` with no logging config
# -- so it is excluded from analysis rather than fought rule by rule. The Dart
# collector is likewise standalone tooling: Sonar does not run `dart pub get`,
# so every `package:vm_service` symbol reports as undefined; it is built and
# analysed by the Dart toolchain, not SonarDart. The C/C++ instrumentation
# shim is likewise standalone tooling: it is compiled into the traced target
# by that target's own toolchain (with `-finstrument-functions`), needs
# `_GNU_SOURCE`/`dl_iterate_phdr` glibc contracts SonarCFamily cannot see
# without a build wrapper, and is exercised by the live instrumented test.
sonar.exclusions=**/__pycache__/**,**/*.pyc,codebase_rag/tests/**,codebase_rag/trace/jvm_agent/**,codebase_rag/trace/dart_collector/**,codebase_rag/trace/c_agent/**
sonar.security.exclusions=codebase_rag/tests/**

# The only coverage report is Python (below); the bundled compiler-frontend
# and agent tool sources (Go go/types, C# Roslyn, Java/Lua trace agents) are
# verified by their own CI jobs and live runs, not the Python suite, so they
# must not sit in the coverage denominator with no report to satisfy them.
# They stay analysed for bugs/smells -- only coverage is waived.
# The constants package is pure data -- names, tuples and lookup tables, with
# no functions or branches. coverage.py records a multi-line dict literal as a
# SINGLE statement, so its continuation lines never appear in the report and
# read as uncovered, which drags new-code coverage down for any change that
# adds a table there. There is nothing to execute and nothing to test.
sonar.coverage.exclusions=**/*.go,**/*.cs,**/*.csproj,**/*.java,**/*.lua,**/*.dart,**/*.c,codebase_rag/constants/**

sonar.python.version=3.12
sonar.python.coverage.reportPaths=coverage.xml

sonar.sourceEncoding=UTF-8