What’s new

We have enhanced the integration of SonarQube Cloud with Amazon CodeCatalyst.

CodeCatalyst can now trigger the SonarQube Cloud scan action during pipeline execution to automate code analysis. This will help you catch issues early and deliver high-quality software.

Learn more here

SonarQube Cloud now supports automatic analysis for .NET Framework projects in GitHub. 

With this enhancement, the automatic analysis feature can now be used to analyze non-SDK projects, Shared Projects (shproj), and SDK-style projects.

Automatic analysis enables a 1-click analysis of your projects hosted in GitHub. More information is available here.

See also the Community announcement for details.

We have released 15 new rules for .NET developers targeting best practices when writing logging code.

A blog C# Logging best practices with .NET is available.

See also the Community announcement and Sonar rules for details.

We have introduced 7 new rules to help you avoid common pitfalls when working with TensorFlow.

Please refer to the Community announcement for more details on each rule, plus check here to provide feedback, and see what’s coming up for Python in SonarQube Cloud.

Automatic analysis for .NET projects has been enhanced.

It will now discover issues in your cshtml and razor files, plus take advantage of new Blazor-specific rules. 

And, as we now analyze the templates, it will also uncover XSS security-impacting issues.

Discover more about automatic analysis here. Plus the supporting Community announcement.

We have introduced 7 new rules to help Pythonistas avoid pitfalls when using Date & Time libraries (even when using the Numpy & Panda libraries).

For further information on each new rule, please refer to the Community announcement.

Plus check here to provide feedback, and see what’s coming up for Python in SonarQube Cloud.