what’s new

Set your analysis up in seconds by adding a few lines to your pipeline configuration! A new GitHub action has been released to analyze your C, C++, and Objective-C code. Learn more

Analyze the inline JavaSript and TypeScript code inside YAML for AWS::Lambda::Function and AWS::Serverless::Function and get your AWS CDK code more secure! Learn more

Access to the wrong list or the wrong dictionary will make your application crash with KeyError or IndexError exceptions. SonarCloud will now help you prevent such a case.  Learn more

Identify Encryption at Rest and at Transit problems in your code when using Python with the AWS Cloud Development Kit. Also, support for domains such as Public Access, Network, Firewall, Permission, and Access Control is coming soon. Learn more

It's the end of hard-coded passwords left mistakenly in the Java code! SonarCloud now detects when a hard-coded string is provided to a method that expects a password, a secret, or a key as a parameter. Learn more

A more modern, consistent, and accessible UI for SonarCloud is born. New shapes, new colors, new fonts, consolidated layouts, and components... We have touched up multiple parts of the UI encompassing many areas of the application.

In a nutshell, here are the improvements:

• A new set of fonts
• Revamped color palette
• Unified layouts
• Modernized componentry

This release is the first step of a long journey that brings a fresh look and feel to SonarCloud. Stay tuned for more about this work that will eventually make a dark mode available for SonarCloud. Learn more