what’s new

Paid organizations now have the option only to allow private projects. This will prevent the accidental creation of public projects.

Activating this option requires an active SonarCloud subscription and for the organization not to have any public projects.

For further information, please refer to the Community announcement.

We just added support for PL/I, VB6, and RPG on SonarCloud for both CI-based and automatic analysis. We now support the same set of languages on SonarCloud and SonarQube.

For further information, please refer to the Community announcement.

You can now resolve issues detected by external rule engines, such as Roslyn within SonarCloud!

For further information, please refer to the Community announcement.

We have added a feature allowing you to directly deactivate rules from an inherited Quality Profile.

If a rule does not meet your project’s quality requirements, you can now deactivate it without creating a copy of the quality profile. This ensures that the profile remains current with any future updates we release.

For further information, please refer to the Community announcement.

In advance of the upcoming .NET release, we are very happy to announce that we have added support for C#12 & .NET 8

We now find issues in the new syntax in C#12 such as primary constructors, collection expressions, inline arrays, optional parameters in lambdas, 'ref readonly' parameters, and type aliases. The current release focuses on the rules contained in the “Sonar way” profile, improvements to non-Sonar way rules will follow.

For further information, please refer to this Community announcement.

As part of our ongoing commitment to enhancing security and enabling more controlled network access, we are introducing support for static IPs for outgoing calls to supported DevOps platforms such as GitHub, GitLab, Azure DevOps Services, and BitBucket Cloud. 

This feature empowers organizations to whitelist specific static IPs, adding an additional layer of security to restrict traffic sources that can access their resources. 

The list of IP addresses is as follows (and documented here):

• 3.122.211.192
• 35.158.229.250
• 18.196.105.168
• 3.68.134.44
• 3.74.220.70
• 3.74.69.101

In addition, we have added those addresses to our SonarCloud GitHub App, so they will be automatically applied if you have selected the “Enable IP allow list configuration for installed GitHub Apps” option for your GitHub organization.

For additional questions please visit this Community announcement.