What’s new

Identify Encryption at Rest and at Transit problems in your code when using Python with the AWS Cloud Development Kit. Also, support for domains such as Public Access, Network, Firewall, Permission, and Access Control is coming soon. Learn more

It's the end of hard-coded passwords left mistakenly in the Java code! SonarQube Cloud now detects when a hard-coded string is provided to a method that expects a password, a secret, or a key as a parameter. Learn more

A more modern, consistent, and accessible UI for SonarQube Cloud is born. New shapes, new colors, new fonts, consolidated layouts, and components... We have touched up multiple parts of the UI encompassing many areas of the application.

In a nutshell, here are the improvements:

• A new set of fonts
• Revamped color palette
• Unified layouts
• Modernized componentry

This release is the first step of a long journey that brings a fresh look and feel to SonarQube Cloud. Stay tuned for more about this work that will eventually make a dark mode available for SonarQube Cloud. Learn more

JavaScript and TypeScript analysis duration of pull requests has been shortened by an average of 40%. Large projects are the ones where there is the biggest improvement. Learn more

Avoid potential crashes or inappropriate behaviors for your Python app by identifying critical bugs. 3 new types of bugs can be detected with this latest Python analysis update. Learn more

Quickly understand how a taint vulnerability is built in your code and make a faster decision on how to fix it with our enhanced dataflows providing more contextual information. Learn more