Hi Developers and Systems Integrators,
We’ve added support for MuleSoft DataWeave to SonarQube Cloud, and coming in SonarQube Server 2026.5. Mulesoft moves data between systems, exposes APIs, and orchestrates the workflows your business depends on. With native support in SonarQube you can now bring the same verification and rigor to Dataweave code that you have in the rest of your applications.
The new release includes:
- Analysis of Dataweave files and Dataweave embedded in Mulesoft XML files.
- Added 26 rules for Dataweave and an additional 16 rules for Mulesoft XML issues to help spot issues before they become outages.
- Includes rules to check for hardcoded database strings (S9104) and insecure connections (S9105) to help protect your sensitive data
- Secret scanning for all your Dataweave and Mulesoft XML files
- Salesforce DX coverage import
Dataweave support is available in Enterprise and Datacenter editions of SonarQube. Let us know if there are more rules that you’d like to see in the analyzer. This is a new area for the team and we’re eager to hear from the community about what you’d like to see added.