How to handle SQALE?

[muhlba91]

SonarQube seems to have deprecated SQALE:

• http://javadocs.sonarsource.org/7.7/apidocs/deprecated-list.html
• https://jira.sonarsource.com/browse/SQALE-277?jql=project%20%3D%20SQALE (see project name)

For now, we are using the sqale.xml file to define, although only partly, the SQALE ratings of each check. However, first, they are not defined well (and for some it might be difficult defining them) and, secondly, what would be the new SQ process for those ratings?

Furthermore, for reading this XML file we rely on the deprecated (and to be removed without replacement) class https://github.com/SonarSource/sslr-squid-bridge/blob/master/src/main/java/org/sonar/squidbridge/rules/SqaleXmlLoader.java#L42.
If SQALE is still supported and need, we must ensure to have a proper implementation working on our side to be independent of this library.

Hence, check if SQALE is still mandatory - if:

• not: remove sqale.xml and all related code
• mandatory: copy over implementation from library, define rule and maintain them

See:

• Issue #213: update to CS 8.20 #216 (comment)
• Resolve violations from sonarcloud.io #217 (comment)

[muhlba91]

note: sqale.xml contains only an example after transitioning to loading via metadata.
to be investigated: do we need to set sqale still nowadays?

[romani]

do we need to set sqale still nowadays?

I never understand it. Let's drop it.