what’s new

SonarCloud now benefits from new rules to help you write more intentional and consistent Dockerfiles, covering Reliability and Maintainability.

For further information and a full list of rules, please refer to this Community announcement.

SonarCloud can now detect 110 secret patterns across 60 cloud providers. 

Leveraging 60 rules, together with SonarLint in the IDE, this represents a powerful combination for detecting and fixing issues.

For further information and a list of rules, please refer to this Community announcement.

To help keep your ASP.NET Core MVC, Razor, and Blazor applications clean, SonarCloud has introduced support for analysis of .cshtml and .razor files in .NET projects. 

For further information and a list of rules, please refer to this Community announcement.

SonarCloud can now detect 67 secret patterns across 29 cloud providers. 

Leveraging a new Sonar open-source secret detection engine, SonarCloud delivers a powerful approach to identify potential security vulnerabilities related to secrets and sensitive information.

For further information, and a list of rules, please refer to this Community announcement.

SonarCloud now supports the scanning of AzureResourceManager templates and Bicep files with the introduction of 12 dedicated rules specifically designed to avoid security misconfiguration.

For further information, and a list of rules, please refer to this Community announcement.

We are pleased to announce the release of Automatic Analysis for C and C++ projects!

Available for all GitHub users, a one-click analysis is possible, removing the need to configure a CI-based analysis. Saving considerable time and effort, Automatic Analysis is free for public projects.

SonarCloud now supports Automatic Analysis for 21 languages, including (C, C++, Java, JavaScript, TypeScript, Python, and C#).

For further information, please refer to the SonarCloud documentation and this Community announcement.