SAFe Toolset - Static Analysis Framework Toolset

The SAFe Toolset supports mainly the following programming languages (via SonarQube plugins and static analyzers):

• C, C++:
• the plugin C++ (Community) modified by Spazio IT – v. 2.2.31;
• the analyzer Cppcheck – v. 2.10 ;
• the analyzers Clang-Static-Analyzer and Clang-Tidy – v. 19.0.0;
• [optionally] the analyzer PC-Lint Plus – v. 2.0 (or  PC-Lint – v. 9.0.0L).
• Java:
• the plugin SonarJava  – v. 7.16.0; it embeds its own analyzer, which is CWE compatible
• the plugin Jacoco  – v. 1.3.0; it requires manual invocation of the analyzer Jacoco (which is anyhow installed by the build tool) .

On top of that C,C++ and Java are also supported by the SAFacilitator:

• for C and C++, the SAFacilitator provides the otherwise missing integration between static analyzers and SonarQube;
• for Java, the SAFacilitator just shows how to activate the already existing integrations. 

Obviously the workflow to be followed depends on the programming language in use (either C,C++ or Java).

The SonarQube instance (version 10.5) installed in the SAFe Toolset includes also plugins for these other programming languages:

• C#
• Go
• JavaScript
• Kotlin
• PHP
• Python
• Ruby
• Scala
• TypeScript
• VBnet
• XML

Their usage is not covered by these documentation pages.