This release introduces Sonar Rule Help, an enhancement to how issue descriptions are presented in SonarLint, along with other goodies to help you write Clean Code.

SonarLint for Visual Studio v6.13 now allows you to view an issue description and associated educational content directly in your IDE, versus in a separate browser. 

Sonar Rule Help provides the assistance you require, conveniently at your fingertips.

In addition, this release also brings:

• Instant synchronisation of injection vulnerabilities detected by SonarQube to your Visual Studio IDE, when using SonarLint in connected mode with SonarQube version >=9.6
• Support for clang-cl compiler for your C and C++ projects, as well as improved analysis performance of large source files
• 6 new rules for your C# code

Learn more with this community announcement and full release notes.

This release delivers a further enhancement for Visual Studio users of SonarLint when using Connected Mode to SonarQube, plus new rules for C++ users.

SonarLint can already synchronize issue suppressions from SonarQube, ensuring you only focus on relevant issues in your IDE and not be distracted by findings already muted in your SonarQube project. We have extended this feature further by enabling issue synchronization to the specific Git branch you are working in. Simply bind your local project to a SonarQube project using Connected Mode, and SonarLint will do the rest.

In addition, this version also brings:

• 13 new rules to help with C++ 20's std::format feature

Learn more in this community announcement and full release notes.

This release delivers improvements to the SonarLint UX plus new rules for C, C++, Objective-C and JavaScript users.

A restructured menu now groups all SonarLint features under Extensions->SonarLint. It is now easier to find links to product documentation and our Community forum, where you can access support or share your feedback.

In addition, this version also brings:

• 6 new rules to cover C++20’s concepts 3.
• 6 new JavaScript rules for detecting performance issues in React.

Learn more in this community announcement.

This release delivers access to more than fifty SonarLint quick fixes for JavaScript and TypeScript users in Visual Studio. 

SonarLint’s quick fixes present contextual opportunities to rapidly auto-fix issues as you code. With a growing library that also covers C, C++, VB.NET, and C# rules, writing clean code has never been easier.

In addition, this release brings:

• Further help for JS/TS developers, with added support for TypeScript 4.7, plus new rules to catch React-specific bugs and code smells.

• For .NET users, new rules to help C# developers write clean Azure Functions, plus support for Tuple Deconstruction.

Read more in our release notes and learn more in this community announcement. 

This release enables JavaScript & TypeScript users to experience the full end-to-end benefits of connecting SonarLint for Visual Studio 2019 and 2022 to SonarCloud and SonarQube, aligning projects and teams to a single standard of Clean Code.

When binding a project to SonarCloud or SonarQube, SonarLint will automatically synchronize rules and analysis settings to:

• Use the same quality profile locally
• Sync any file or directory inclusions/exclusions
• Mute any issues already flagged as Won’t Fix or False Positive

Discover the full benefits of Connected Mode

Read more in our release notes and learn more in this community announcement.

This release enables the synchronization of file exclusions from SonarCloud and SonarQube to SonarLint for C and C++ users.

File or directory inclusions/exclusions configured for your project in SonarQube or SonarCloud are now synchronized to SonarLint, ensuring your analysis is focused upon the desired source code.

Using Connected Mode, third-party code or source files generated by a tool can selectively be removed from analysis within the Visual Studio IDE.

Check out our release notes and learn more in this community announcement.

This release adds support for detecting and preventing Cloud “secrets” (user or system-level information such as API tokens, keys, usernames, and passwords) in Visual Studio. 

SonarLint provides a set of rules to automatically detect authentication credentials in source code or language-agnostic files (e.g. xml, yaml, json) within AWS, Google Cloud, Microsoft Azure Cloud, IBM Cloud, Alibaba Cloud. It then flags an alert to prevent the confidential information from publicly leaking, as well as clear contextual guidance on how best to avoid this issue in the future.

Read this blog to learn why protecting cloud credentials is critical and how SonarLint secures your code. Check out our release notes and learn more in this community announcement.

This release brings improvements and new features for JavaScript and TypeScript users in Visual Studio 2019 and 2022.

Introducing new rules for regular expressions. Regex can be complex and prone to errors, plus identifying issues can be difficult and time-consuming. With this release, we deliver a set of 19 rules to help you write efficient, error-free, and safe regular expressions in JS/TS.

New rules dedicated to Mocha and Chai. Test code quality is important and we have a new set of rules to help you write better tests with Mocha/Chai.

Check out our release notes and learn more in this community announcement.