SCANPY-237 Add dry run mode to Pysonar scanner

[marc-jasper-sonarsource]

No description provided.

[sonar-review-alpha]

Summary

Adds dry-run mode to the Pysonar scanner, allowing users to validate configuration without connecting to a SonarQube server or submitting analysis. The feature includes configuration reporting, coverage report validation with detailed error messages, and exit codes for CI/CD integration. Enabled via --dry-run flag, property -Dsonar.scanner.dryRun=true, or environment variable SONAR_SCANNER_DRY_RUN=true.

What reviewers should know

Start by reading DRY_RUN_MODE.md to understand the user-facing feature. The implementation has three main components: (1) entry point in __main__.py:run_dry_run() checks if dry-run is enabled and exits early, (2) dry_run_reporter.py provides the core logic—DryRunReporter formats output, ValidationResult tracks errors/warnings, and CoverageReportValidator checks coverage files for existence, readability, and Cobertura XML format, (3) configuration plumbing in cli.py and properties.py adds the flag. The validation provides clear, actionable error messages (not found, not readable, invalid XML, wrong root element) which is critical for the stated use case of troubleshooting configuration. Tests in test_dry_run.py cover all validators and the integration path; also update existing configuration loader tests to expect the new property.

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[hashicorp-vault-sonar-prod]

SCANPY-237

[sonar-review-alpha]

Conclusion: There's one clear user-facing bug that needs fixing before merge — warnings are silently dropped when validation passes — and a minor TOCTOU issue in the file-open logic.

🗣️ Give feedback

[sonar-review-alpha]

LGTM! ✅

🗣️ Give feedback

[sonarqube-next]

Quality Gate passed for 'Python Scanner'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
93.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[sonar-review-alpha]

LGTM! ✅

🗣️ Give feedback