What’s new

SonarQube Cloud users can take advantage of a new release of the .NET analyzer with:

• Support for .NET 9
• New UX for Null Reference advanced issues
• New secrets detection rule
• New advanced rules

See this community post for more details.

Support for Ansible is now available with SonarQube Cloud (all plans).

Offering 17 rules that allow you to scan your YAML-based Ansible files, covering security issues in Ansible itself, Docker, and Kubernetes deployments, as well as maintainability issues.

You can view our list of rules here. 

See the Community Post for more details.

Support for Dart is now available with SonarQube Cloud Team and Enterprise plans, as well as Open Source projects.

You can view our expanding list of rules here. To learn more about the approach we have taken check out this blog. 

See the Community Post for more details.

We have added DISA Application Security and Development (ASD) STIG and Cloud Application Security Assessment (CASA) security reports to the SonarQube Cloud Enterprise plan.

See also the Community announcement for further details.

SonarQube Cloud now supports multi-language analysis via the SonarScanner for .NET.

Now, a single scan can analyze your entire repository.

Plus, for JS and TS files the scanner auto-detects test files, meaning you can now analyze a typical .NET backend + JS/TS frontend application with a single scan.

See also the Community announcement for details of languages supported and set up guide.

SonarQube Cloud can now detect even more secret patterns.

Learn more here.