SonarQube for IDE: Visual Studio v9.8 improves remediation workflows by aligning with .NET custom severities and enhancing issue management through the report view. These updates provide the deterministic analysis and transparency necessary to meet enterprise standards while developing at high speed.

Full respect for .NET custom severities.

This version overhauls how project settings are synced to ensure Sonar rules behave consistently with native compiler rules, providing a more stable development process.

• Custom severity mappings: Project-specific mappings in .editorconfig or project files are now fully respected by the Sonar analysis engine.
• TreatWarningsAsErrors support: The engine now honors the TreatWarningsAsErrors flag, ensuring the IDE experience and CI/CD pipelines remain synchronized.
• Deterministic alignment: Mirroring native configurations provides the consistent and repeatable results required for corporate and regulatory compliance.

Report view: advanced issue management. 

The report view has been upgraded to provide better command and control over technical debt, streamlining the verify and solve stages within the developer's workflow.

• Status management: Enhanced tracking for standard issues and taint vulnerabilities ensures that verification is thorough and transparent.
• Reopen from IDE: Issues can be reopened directly from the report view, returning them to the active backlog for rapid remediation.

Review the full release notes and community post for detailed updates.

SonarQube for IDE: Visual Studio v9.0 delivers an enhanced connected mode experience,  with C# Security Hotspots and secondary locations, and improved performance. 

Connected mode enhancements:

• Security Hotspots: We now support C# and VB.NET security hotspots while in Connected Mode, allowing you to review and triage potential security risks directly within Visual Studio.
• Secondary Locations (C#): To help you triage faster, issues now include secondary locations. This provides the context needed to understand the root cause of a bug without leaving the editor.
• Faster server synchronization and an improved report view. Plus, introducing a “Focus on New Code” option, helping you prioritize issues in code that you have recently changed.

Important note:

• We no longer support full solution analysis in this version. The extension now limits analysis to Open Files only.

For more information, see the release notes and the community post.

SonarQube IDE: Visual Studio v8.28 introduces the unified security report, making it easier than ever to see and act on all your security issues.

The new unified security report brings together all security findings into a single tool window. Previously, you had to check separate views for security hotspots, taint vulnerabilities, and dependency vulnerabilities. Now, you get a complete picture of your project's security posture at a glance. This holistic view empowers you to:

• Triage and prioritize with ease: See all security issues in one place to make informed decisions about what to fix first.
• Streamline your workflow: Spend less time navigating and more time resolving issues.
• Gain clarity: Experience a consistent and intuitive interface for all security findings.

Discover additional details and screenshots in the release notes and community post.

Take control of your dependencies directly within your IDE. 

SonarQube for IDE: Visual Studio v8.24 introduces robust dependency risk management.

In connected mode, simply access the new Dependency Risks view from the connected mode menu. This powerful view clearly displays dependency risks and license violations identified in your SonarQube Server project analysis. For insights into analyzing your projects for dependencies, refer to the SonarQube documentation. 

Act on issues instantly: Don't just see the problems—solve them! Interact directly with these issues by opening them in SonarQube Server or changing their status right from your IDE.

Streamline your setup: We’ve enhanced binding detection between your local projects and SonarQube Server or Cloud analyzed projects using Git information. This improvement simplifies the connected mode setup after your initial SonarQube for IDE connection.

Expanded .NET capabilities: This release includes a significant .NET enterprise analyzer update. Discover more here.

C++ analysis using MISRA C++:2023 rules: These early access rules are now available in the IDE enabling local analysis.

Discover additional details and screenshots in the release notes and community post. 

SonarQube for IDE: Visual Studio v8.19 delivers simplified management of security hotspots.

• Simplified Security Hotspot Management: The "SonarQube Local Security Hotspots" and "SonarQube Server Security Hotspots" windows have been unified into a single "SonarQube Security Hotspots" window, accessible via SonarQube > Connected Mode > View Security Hotspots.

• Clear Differentiation: Easily distinguish between locally found hotspots and those from SonarQube Cloud or Server with icons.

• Improved CI/CD Integration: Review, acknowledge, fix, or mark hotspots as safe after pushing code to the CI/CD pipeline, with status synced to SonarQube Cloud or Server.

• Enhanced Filtering: Filter security hotspots by issue location and priority for better workflow.

Find more information and screenshots in the release notes and community post.

SonarQube for IDE: Visual Studio v8.13 simplifies project binding to SonarQube Cloud and Server.

Key improvements:

Automated connection
Clicking "Open in IDE" in SonarQube Cloud or Server (without connected mode) now automatically creates the connection and opens Visual Studio, prompting you to trust the connection.

Simplified token generation
Token generation is now automated within SonarQube for IDE: Visual Studio. To begin, click 'Generate' in the 'Edit Authentication Details' window. This will open a SonarQube Cloud or Server webpage where a token is automatically created. The generated token will then be automatically filled into the 'Token' field in SonarQube for IDE.

Updated .NET analyzer

Discover more details in our release notes and community post.

SonarQube for IDE: Visual Studio v8.11 introduces support for two new languages, and enhancements!

• New language support: 
  • HTML analysis is now available for all users.
  • T-SQL analysis is available for SonarQube Cloud users, and SonarQube Server users with Developer or Enterprise editions.

• Enhanced AI CodeFix suggestions: A diff view has been added for easy comparison between current code and the suggested modifications.

• Updated .NET enterprise edition analyzer: Now supports raising issues on .razor and .cshtml files.

Discover more details in our release notes and community post. 

SonarQube for IDE: Visual Studio v8.10 brings a host of analyzer updates, plus deprecates username/password-based authentication for connected mode.

Discover more with our release notes and community post. 

SonarQube for IDE: Visual Studio v8.9 introduces a new flow to unbind a project.

With this final round of enhancements to connected mode setup, we introduce easily unbinding a project that is connected to SonarQube Cloud or Server directly within the IDE. Check here for detailed instructions.

Discover more with our release notes and community post.

SonarQube for IDE: Visual Studio v8.8 introduces two new modes for visualization of issue categorization.

In parallel with SonarQube Server 10.8, we have introduced the option to select either:

• Multi-Quality Rule (MQR) mode - enabling issues to have multiple qualities, and leveraging the newer categorization and severities from SonarQube Server 10.8
• Standard Experience mode - which maintains the issue categorization from SonarQube 9.9 (bug, vulnerability and code smell)

Plus, two important updates:

• A new .NET analyzer is available with support for .NET 9 and C#13.
• SonarQube open-source analyzers bundled by SonarQube for IDE are now using the new Sonar Source-Available License.

Discover more with our release notes and community post.