jenkinssonarqubesonarqube-scansonar-runner

Sonarqube scan takes entire code or just the hashes


Currently our sonarqube server is installed in ap-south-1 and we want to scan java code and the Jenkins server resides in us-East-1. Currently peering is established between us-East-1 and ap-south.
The question here is when Jenkins server that is running mvn sonar:sonar on remote sonar host which is in ap-south-1, is it transmitting the entire code snapshot to sonarqube server or just the hashes of the code are being transmitted to sonarqube server ?


Solution

  • I'm not sure what you mean by "hash". When the scan is completed, you can inspect the results of the scan, which includes the source text that was scanned, which will include the entire contents of all the source files.