t1r1rizk/sonar-scanner-cli repository overview

⁠Unofficial SonarScanner CLI (Native ARM64 / v8 Build)

A lightweight, secure, and natively compiled linux/arm64 Docker image for the SonarScanner CLI.

⁠📖 Repository Overview

⁠Why does this repository exist?

The official sonarsource/sonar-scanner-cli images published on Docker Hub are strictly compiled for linux/amd64 architectures. If you attempt to execute the official image on ARM64 environments—such as Apple Silicon Macs (M1/M2/M3), AWS Graviton instances, Raspberry Pi, or ARM64 Kubernetes clusters (e.g., K3s)—Docker is forced to fall back on heavy QEMU/Rosetta 2 translation layers, resulting in degraded scanning performance, segmentation faults, or build pipeline timeouts.

This repository resolves that limitation by packaging the platform-independent binaries of SonarScanner natively over an ARM64-optimized runtime environment.

⁠🛠️ Image Architecture & Stack

• Base Image: amazoncorretto:21-alpine (A minimal, hardened Alpine Linux distribution bundled with a production-ready, native ARM64 Amazon Corretto OpenJDK 21 build).
• SonarScanner CLI Version: 8.0.1.6346
• Embedded Tooling:
  • bash / curl / unzip (Core environment mechanics)
  • git (Enables seamless SCM interaction and SonarQube "git blame" code authorship features)
  • nodejs / npm (Required for running native JavaScript, TypeScript, and CSS analysis)

⁠🚀 Quick Start Guide

You can run this container directly inside your project's root directory. It mounts your local working directory into the container's path (/usr/src) to analyze your source code.

docker run --rm \
  -e SONAR_HOST_URL="[https://your-sonarqube-instance.com](https://your-sonarqube-instance.com)" \
  -e SONAR_TOKEN="sqa_your_secret_project_token_here" \
  -v "$PWD:/usr/src" \
  t1r1rizk/sonar-scanner-cli:arm64 \
  -Dsonar.projectKey="your-project-key" \
  -Dsonar.sources=.

⚖️ License Docker Image Wrapper License The configuration files, build manifests, and Dockerfile logic contained within this specific repository are licensed under the MIT License. You are free to modify, distribute, and integrate this wrapper configuration into commercial pipelines without restriction.

Underlying Software Licenses By downloading and utilizing this Docker image, you agree to comply with the license terms governing the packaged components:

SonarScanner CLI: Distributed by SonarSource SA under the GNU Lesser General Public License v3.0 (LGPLv3).

Amazon Corretto JDK: Distributed by Amazon under the GNU General Public License v2 (GPLv2) with Assembly Exception.

Alpine Linux: Packages inside the base layer are distributed under open-source licenses, primarily GPL and MIT.

⚠️ Disclaimer This is an unofficial, community-maintained project. This repository and its maintainers are not affiliated, associated, authorized, endorsed by, or in any way officially connected with SonarSource SA, SonarQube, or any of their subsidiaries or affiliates. The official SonarSource homepage can be found at https://www.sonarsource.com/⁠.

The software inside this image is provided "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, and non-infringement. In no event shall the authors or copyright holders be liable for any claim, damages, or other liability, whether in an action of contract, tort, or otherwise, arising from, out of, or in connection with the software or the use or other dealings in the software.