add sonar-runner plugin, add some pmd violations