Shell

The Shell analyzer for SonarQube Server is designed to perform static code analysis on Bash and POSIX Shell scripts.

Language-specific properties

You can discover and update the Shell-specific properties by going to Administration > Configuration General Settings > Languages > Shell.

Supported languages and syntaxes

The analyzer is designed to analyze Bash and POSIX shell scripts, which are the only officially supported shell flavors.

However, analysis for other shell flavors (e.g. ksh, zsh) is also possible. This support is partial, and the analyzer will perform best on scripts that use syntax compatible with or similar to POSIX and Bash. You may encounter parsing errors when analyzing scripts that rely on features or syntaxes specific to other shells. This may lead to raising issues unrelated to your shell flavor.

In-line suppression of issues

Adding the # NOSONAR comment at the end of the line will suppress all issues on that line.

Rather than relying on this method, we suggest refining your analysis scope to avoid creating major gaps in your code review. Because the NOSONAR comment silences all current and future issues on a line without regard for their severity, it is an imprecise tool. Even if you only intend to hide a minor stylistic point, you could unintentionally obscure a serious security flaw.