[leo-geoffroy-sonarsource]

Draft measurement PoC. Do not merge. Stacked on #6514 (base is its branch, so the diff is one binary).

Replaces the packaged udg-gen-linux-aarch64.xz with a build of SonarSource/semsitter#5010: get-types falls back to the framework API database (JAVA_DB) when no jar and no JDK declares a type, and java.txt gains the test/web/DI library rows. Static musl, Java only, stripped.

Why: the A3S "file sources only" mode analyzes without the project's jars, so library types (JUnit, Spring, Servlet, ...) stay unresolved with the master udg-gen. The build is used on Dev22 Mutualized (ARM64) for the SemSitter benchmark.

No code change, no tests run here.

🤖 Generated with Claude Code

[hashicorp-vault-sonar-prod]

SONARJAVA-7339

[gitar-bot]

Code Review ✅ Approved 🟡 Medium risk

Raising the plugin JAR size ceiling from 45 MB to 100 MB could allow oversized artifacts through build validation.

Replaces the packaged linux-aarch64 udg-gen binary with a stripped static musl build that falls back to the framework API database when no jar or JDK declares a type, and adds test/web/DI library rows to java.txt. No open findings; this is a draft measurement PoC not intended for merge.

Verification Rules 2/2 met Repos 4 inspected · PRs 2 inspected

Functional validation No results

Rules 2 passed 2 not applicable

✅ Internal artifact registries
✅ Repository license compliance

Broader impact Repos 4 inspected PRs 2 inspected

Cross-repo 4 repositories inspected 0 open impacts

SonarSource/sonarlint-intellij Inspected
SonarSource/sonarlint-eclipse Inspected
SonarSource/sonarlint-vscode Inspected
SonarSource/sonar-java-symbolic-execution Inspected

Cross-PR 2 PRs inspected 0 open impacts

PR 6497: SONARJAVA-7236 Experiment: supply only the JDK classpath to semsitter Inspected
PR 6500: SONARJAVA-7320 Cache safe Maven module results in PR checks Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}