Skip to content

feat(cpp): add cpp module scaffolding and plugin registration#398

Open
Divyateja2709 wants to merge 3 commits into
cbomkit:mainfrom
Divyateja2709:pr1
Open

feat(cpp): add cpp module scaffolding and plugin registration#398
Divyateja2709 wants to merge 3 commits into
cbomkit:mainfrom
Divyateja2709:pr1

Conversation

@Divyateja2709
Copy link
Copy Markdown

@Divyateja2709 Divyateja2709 commented May 6, 2026

hi @n1ckl0sk0rtge

This PR introduces the initial Maven and plugin scaffolding required for upcoming C/C++ language support in the Sonar Cryptography Plugin.

Changes Included
Added a new cpp Maven module
Registered the cpp module in the root pom.xml
Added the cpp dependency to sonar-cryptography-plugin/pom.xml
Updated SonarQube plugin configuration to recognize:
.c
.cpp
.h
source files through requiredForLanguages
Purpose

This PR establishes the build and plugin wiring needed before implementing:

C/C++ parsing
ANTLR grammar integration
OpenSSL detection rules
C/C++ detection engine support

This work is part of the initial language support setup outlined in the LFX mentorship project improvements for extending the Sonar Cryptography Plugin with C/C++ support.

Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
@Divyateja2709 Divyateja2709 requested a review from a team as a code owner May 6, 2026 02:29
@san-zrl
Copy link
Copy Markdown
Contributor

san-zrl commented May 20, 2026

Hi @Divyateja2709,

Thank you for your PR and for the time and effort you put into contributing to CBOMkit—we truly appreciate your interest.

You may have noticed that we are already working on adding C/C++ support to sonar-cryptography in PR #377. This approach differs from yours, as it relies on Sonar’s native C/C++ support package rather than ANTLR, similar to how the existing Java module is implemented.

Work on PR #377 is already quite advanced, and at this stage we are leaning toward this approach because we expect it to provide stronger support for cross-file symbol tracing through the Sonar infrastructure.

That said, we will keep your PR open for now until a final decision is made.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants