Out of interest, I'm a happy Detekt user since the early milestone releases and I was wondering if there are any plans to actually stabilize certain versions? I feel Detekt is moving quickly paced like ever before, so I have the fear that potential bugs / instabilities could lurk into it. Up until recently, I was using it mainly in small teams, so I could easily argue a version bump in case of an issue or fight this out myself, but now I basically want to throw it at a team of 30+ developers replacing Sonarqube (partially). Maybe I just missed to see an "official" notion on this topic anywhere, and maybe it's not so bad to move quickly and fix things after all, but on the other side new issues are easily introduced as well, and a static code analysis tool should be - first and foremost - reliable and stable in how it works and what it reports. So, tl;dr, will Detekt ever have stable, maintained versions?

afaik Sonarqube uses Detekt under the hood for Kotlin code, so no need to replace it

Are there any features sonar provides which you currently miss for Kotlin?

I was trying yesterday the Detekt plugin and it is amazing, the only thing I want is an option to override the reformat code (control alt L) to use detekt autoformatting because in some places, the detekt formatting is different from intellij formatting.

What’s the official/recommended way of integrating detekt into SonarQube? (I see the

sonar-kotlin

plugin offered by detekt is not official and there is SonarKotlin official from SonaQube which says you can pull detekt reports), I am confused which way to go!

Hey, is there a way to easily setup a gradle task to autoCorrect a single rule with Detekt ?

I don't know what changed in 1.7.4, but when I run detekt in parallel on all configured modules, I get these weird classloading issues:

Caused by: java.lang.NoClassDefFoundError: kotlin/io/CloseableKt
        at io.gitlab.arturbosch.detekt.api.internal.YamlConfig$Companion.load(YamlConfig.kt:67)
        at io.gitlab.arturbosch.detekt.api.internal.YamlConfig$Companion.load(YamlConfig.kt:56)
        at io.gitlab.arturbosch.detekt.cli.ConfigurationsKt.parsePathConfig(Configurations.kt:67)
        at io.gitlab.arturbosch.detekt.cli.ConfigurationsKt.loadConfiguration(Configurations.kt:29)
        at io.gitlab.arturbosch.detekt.cli.runners.Runner.createSettings(Runner.kt:78)
        at io.gitlab.arturbosch.detekt.cli.runners.Runner.execute(Runner.kt:30)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at io.gitlab.arturbosch.detekt.invoke.DefaultCliInvoker.invokeCli(DetektInvoker.kt:51)
        ... 98 more

Need a hand with custom reports on Detekt 🙏 [thread]

Hey! Is it possible to run detekt only on a given set of files? (something like 

./gradlew detekt {list of files}

) Context: I want to write a git hook which runs detekt on all the changed files (only the changed files) and fail if the task fails.

Hi! is it possible to get McCabe complexity (mcc) break-up per file/class?

Edit: repository is still located at arturbosch/detekt and the website at https://arturbosch.github.io/detekt. It is currently not possible to move the repo to the detekt organization as we generate our documentation from the source code and GitHub pages requires us to open a new repo for the url detekt.github.io.

@Gopal S Akshintala By default sonarqube uses the SonarKotlin profile (Sonar way) without the detekt rules. Have you modified the quality profile or created a new one containing the detekt rules? How many rules do you see in the Rules tab?

Can anyone help with configuring console reports? I want to only have the summary (number of issues found) at both success and failures. But when I exclude all processors and reporters I still have all individual issues logged into console Part of config:

processors:
  active: true
  exclude:
   - 'DetektProgressListener'
   - 'FunctionCountProcessor'
   - 'PropertyCountProcessor'
   - 'ClassCountProcessor'
   - 'PackageCountProcessor'
   - 'KtFileCountProcessor'

console-reports:
  active: true
  exclude:
    - 'ProjectStatisticsReport'
    - 'ComplexityReport'
    - 'FindingsReport'
    - 'NotificationReport'
    - 'BuildFailureReport'

Example of output:

I'm having a hard time trying to make detekt 1.7.0+ work with Spring and java 11. If I go to java 8, it works. If I go to 1.6.0, it works. If I use java 11 and detekt 1.7.0+, sometimes it doesn't load

java.sql.Date

, sometimes it can't find

org.yaml.snakeyaml.nodes.Tag

. Attached the smallest

build.gradle.kts

that I was able to reproduce the problem. Just add an empty .kt file under

src/main/kotlin

and you'll see the error. Running gradle 6.3

FYI - the top Github link at https://detekt.github.io/detekt/# still links to

arturbosch/detekt

I have the suspicion that

detektMain

cannot run flawless with

org.gradle.parallel=true

on many modules at once. I get weird class not found exceptions on runtime (with 1.8) that I don't get with the old (legacy)

detekt

task. Has anybody experienced something like this?

Hello everyone, I switched to

buildUponDefaultConfig = true

recently and realised that overriden functions also show as

EmptyFunctionBlock

(I know there is a flag to ignoreOverriden) I'm more curious to know what was the reasoning behind leaving it to false and what is the best approach to solve situations where you are implementing an interface from the framework or third party provider that you have no control over.

So after updating IDEA plugin I get LongParameterList error for many of my non data type constructors, is this intended behavior? I would expect to get this error only for function parameters

Can't run gradlew detekt because of Could not resolve org.jetbrains.kotlinx:kotlinx-html-jvm:0.7.1. Any ideas? Using Detekt 1.9.0

Hi 👋 . I am trying to write to a custom rule to detect mutation in code. This involves checking for presence of Mutable collections, keywords like

var

in codebase. What is i could come up till now is

override fun visitDeclaration(dcl: KtDeclaration) {
        super.visitDeclaration(dcl)
        if (dcl is KtProperty && dcl.isVar) {
            report(CodeSmell(issue, Entity.from(dcl), "Mutation in code"))
        }
    }

Now I am writing code to detect keywords like

val list = mutableListOf(1, 2)

. I am not sure how to go about it?

1.

fun foo(bar : (String) -> Unit)

2.

fun foo(bar : (name: String) -> Unit)

Hi. I don't know how can i call

name

.. Please give me a keyword lambda property.. lambda description.. anyway If it is

interface

, I think it is better to have

lambda description

. And when I use this function..

startSmsUserConsent { name ->
   ...
}

I think it is good to specify

lambda description

. Is there any rule or plan for this?

What do folks do with LongParameterList warnings? I used to recommend that people use a data class to pass paramaters into a constructor or function to group the parameters logically. The current versions of Detekt also flag too many parameters in data class constructors... 😔

We are happy to merge any doc improvements. 🙂 Feel free to submit a PR.

Yes, there’s an issue related with that: https://github.com/detekt/detekt/issues/2655 As a woraround: run

./gradlew detektBaseline --continue

Is there a good way to disallow a certain annotation whole-cloth? I am trying to not let people use Java's

@SuppressWarnings

in Kotlin code, because we're trying to track warning suppressing and normalizing would help. The problem with this particular annotation is that there is no associated import to filter on at a file level.

I’d love to open an issue about finding a logo for Detekt. Seems like this was never discussed before or am I wrong?

I’d love for detekt to get a logo too 🙂 when I google for one (I tend to forget there’s none) I only get the logo for the old Amnesty International’s homonymous tool 🙂

hey getting the following error when I upgraded from 1.6.0 to 1.9.1:

Caused by: java.lang.NoSuchMethodError: '<http://org.jetbrains.kotlin.com|org.jetbrains.kotlin.com>.intellij.openapi.extensions.ExtensionsArea <http://org.jetbrains.kotlin.com|org.jetbrains.kotlin.com>.intellij.openapi.project.Project.getExtensionArea()'

please help.

Is it somehow possible to place custom detekt rules in

buildSrc

instead of a separate Gradle module and let the Gradle plugin pick them up or is this eventually already built-in and I have some configuration error because my custom rules don't seem to execute?