Rules and Languages

New rules / language support Suggest new rules or languages that could enrich Sonar code analysis. Report False-positive / False-negative... Should a rule be adjusted for False-Positives, False-Negatives, or just a better description? Should analysis scope be broadened for a new framework, or language version? Let us know! [Resources: How to Report a False-positive / False-negative]

Topic	Replies	Views	Activity
About the Rules and Languages category Rules and Languages	0	160	January 29, 2025
[Java][S6104] False Negative: Does not detect `return null;` in block lambda for computeIfAbsent/com Report False-positive / False-negative... java , false-negative	1	7	May 11, 2026
[Java][S2200] False Negative: Rule does not detect compareTo() result when wrapped in type cast (e.g Report False-positive / False-negative... java , sonarqube , false-negative	1	7	May 11, 2026
HTTPS Proxy Authentication Broken in Scanner CLI 8.0 / Java Library 4.0 (HTTP 407 Error) Rules and Languages	4	62	May 11, 2026
False-positive on java:S5194 when only throwing exceptions Report False-positive / False-negative... java , sonarqube , false-positive , rules	1	39	May 8, 2026
java:S1942 "Simple class names should be used" too relaxed? Rules and Languages java	6	75	May 8, 2026
Do not enforce private constructors on utility classes New rules / language support coverage , universal	6	158	May 6, 2026
False positive for rule java:S2119 (“Random” objects should be reused) Report False-positive / False-negative... java	0	19	May 6, 2026
False positive php:S1172 on constructor parameter promoted with `readonly` only (no visibility modif Report False-positive / False-negative... php , false-positive , php8	3	29	May 6, 2026
False positive for rule java:S2755 Report False-positive / False-negative... java , bump	4	57	May 6, 2026
False Positive: “Target of URI doesn't exist” for valid Flutter import Report False-positive / False-negative... dart-flutter , sonarqube-cloud	1	10	May 5, 2026
Extend subnet exceptions from go:S1313 to include 3fff::/20 Report False-positive / False-negative...	1	40	May 5, 2026
[Java] Proposal: path traversal rule for archive-derived and constructed paths New rules / language support java	0	31	May 1, 2026
FP S1210: Implementing comparable operators for file types Report False-positive / False-negative... csharp , dotnet	1	29	May 1, 2026
False Positive on typescript:S6759 when mixing interfaces and types Report False-positive / False-negative... typescript , react	2	39	April 30, 2026
Sonar coding_rules Rule ID java:S881 - Mentioning C/C++ resources, do they contribute or not Rules and Languages java , sonarqube	4	73	April 29, 2026
Wrong or misleading rule asking to use std::byte Report False-positive / False-negative... cfamily	2	111	April 28, 2026
False Positive on S2629 using log4net Report False-positive / False-negative... dotnet	8	162	April 28, 2026
DatabaseClient.sql() (Spring R2DBC) not detected as SQL injection sink by S2077/S3649 Rules and Languages spring	1	29	April 27, 2026
Drupal sonarqube results are not Drupal compatible Report False-positive / False-negative... sonarqube , me-too	10	2704	April 27, 2026
Possible false positive with SuperBuilder and java:S3252 Report False-positive / False-negative... java	2	49	April 23, 2026
csharp:S1125 FP comparing nullable bool to bool literal Report False-positive / False-negative... csharp , dotnet , bump	3	51	April 23, 2026
Svelte language coverage support help/request New rules / language support javascript , coverage , language-expansions , bump , sonarqube-cloud	1	35	April 23, 2026
FP C++ / S2807: free operators/ hidden friend Report False-positive / False-negative... cfamily , sonarqube-ide	3	52	April 29, 2026
Spring Rules for Kotlin Rules and Languages	1	19	April 21, 2026
Rule S117: False positives on PHP 8 constructor property promotion New rules / language support false-positive , php8	7	80	April 20, 2026
FP/FN 1764: Impure methods are not guarenteed to return the same value twice Report False-positive / False-negative... csharp , dotnet	8	59	April 20, 2026
FP C++ / S6018: static local variable & inline Report False-positive / False-negative... cfamily	2	40	April 29, 2026
S1186 running on Test scope generates almost only false-positives in GoLang Report False-positive / False-negative... go , sonarqube , sonarqube-cloud	2	31	April 15, 2026
Path.Combine Vulnerabillity not detected Report False-positive / False-negative... csharp , sonarqube	3	209	April 15, 2026