What’s new

You can now resolve issues detected by external rule engines, such as Roslyn within SonarQube Cloud!

For further information, please refer to the Community announcement.

We have added a feature allowing you to directly deactivate rules from an inherited Quality Profile.

If a rule does not meet your project’s quality requirements, you can now deactivate it without creating a copy of the quality profile. This ensures that the profile remains current with any future updates we release.

For further information, please refer to the Community announcement.

In advance of the upcoming .NET release, we are very happy to announce that we have added support for C#12 & .NET 8

We now find issues in the new syntax in C#12 such as primary constructors, collection expressions, inline arrays, optional parameters in lambdas, 'ref readonly' parameters, and type aliases. The current release focuses on the rules contained in the “Sonar way” profile, improvements to non-Sonar way rules will follow.

For further information, please refer to this Community announcement.

As part of our ongoing commitment to enhancing security and enabling more controlled network access, we are introducing support for static IPs for outgoing calls to supported DevOps platforms such as GitHub, GitLab, Azure DevOps Services, and BitBucket Cloud. 

This feature empowers organizations to whitelist specific static IPs, adding an additional layer of security to restrict traffic sources that can access their resources. 

The list of IP addresses is as follows (and documented here):

• 3.122.211.192
• 35.158.229.250
• 18.196.105.168
• 3.68.134.44
• 3.74.220.70
• 3.74.69.101

In addition, we have added those addresses to our SonarQube Cloud GitHub App, so they will be automatically applied if you have selected the “Enable IP allow list configuration for installed GitHub Apps” option for your GitHub organization.

For additional questions please visit this Community announcement.

SonarQube Cloud now benefits from new rules to help you write more intentional and consistent Dockerfiles, covering Reliability and Maintainability.

For further information and a full list of rules, please refer to this Community announcement.

SonarQube Cloud can now detect 110 secret patterns across 60 cloud providers. 

Leveraging 60 rules, together with SonarQube for IDE in the IDE, this represents a powerful combination for detecting and fixing issues.

For further information and a list of rules, please refer to this Community announcement.