# Analyze solution from visual studio with Sonarcloud

**URL:** <https://community.sonarsource.com/t/analyze-solution-from-visual-studio-with-sonarcloud/78880>\
**Category:** SonarQube Cloud\
**Tags:** visualstudio, vscode\
**Created:** [December 13, 2022, 11:59pm UTC](https://community.sonarsource.com/t/analyze-solution-from-visual-studio-with-sonarcloud/78880 "2022-12-13T23:59:49Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![amit.s](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@amit.s](https://community.sonarsource.com/u/amit.s)\
**Post date:** [December 13, 2022, 11:59pm UTC](https://community.sonarsource.com/t/analyze-solution-from-visual-studio-with-sonarcloud/78880/1 "2022-12-13T23:59:49Z")

</div>

Hi everyone,

I’m looking for some guidance.

We are already using Sonarcloud through Azure DevOps for analysis, so the question is, can the developers analyze their code (whole solution) by connecting visual studio with Sonarcloud? Or is that not possible?

Any documentation link would be helpful. I did have a look at Sonarlint but we would like the whole solution to get scanned in one go instead of a single file that is currently open.

TIA.

Regards,  
Amit

---

<div class="post-metadata">

**Author:** ![ganncamp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/ganncamp/32/1261_2.png) [@ganncamp](https://community.sonarsource.com/u/ganncamp)\
**Post date:** [December 14, 2022, 4:52pm UTC](https://community.sonarsource.com/t/analyze-solution-from-visual-studio-with-sonarcloud/78880/2 "2022-12-14T16:52:04Z")

</div>

Hi Amit,

Welcome to the community!

> [@amit.s](#):
>
> I did have a look at Sonarlint but we would like the whole solution to get scanned in one go instead of a single file that is currently open.

Would you mind explaining why you want developers to analyze locally files they’re not actually working on?

&nbsp;  
Ann

---

<div class="post-metadata">

**Author:** ![amit.s](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@amit.s](https://community.sonarsource.com/u/amit.s)\
**Post date:** [December 15, 2022, 12:30am UTC](https://community.sonarsource.com/t/analyze-solution-from-visual-studio-with-sonarcloud/78880/3 "2022-12-15T00:30:52Z")

</div>

Thanks Ann, it was more of a precautionary way that our organization wants.

On that note, I did connect Sonarlint with Sonarcloud and I noticed that the issues (bugs/vulnerabilities) Sonarcloud reported were not seen in Sonarlint, is that the expected behaviour?

---

<div class="post-metadata">

**Author:** ![ganncamp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/ganncamp/32/1261_2.png) [@ganncamp](https://community.sonarsource.com/u/ganncamp)\
**Post date:** [December 15, 2022, 2:45pm UTC](https://community.sonarsource.com/t/analyze-solution-from-visual-studio-with-sonarcloud/78880/4 "2022-12-15T14:45:10Z")

</div>

Hi,

It’s quite likely you’ll see more vulnerabilities reported in SonarCloud; taint analysis rules require cross-file analysis which we turn off in SonarLint to not drag the IDE down.

> [@amit.s](#):
>
> Thanks Ann, it was more of a precautionary way that our organization wants.

Thanks for the explanation. This really isn’t how we recommend going about it. We believe developers should concentrate on keeping the code they’re working on _now_ clean. That will save them brain cycles and time.

And that’s why SonarLint doesn’t support whole-project analysis.

&nbsp;  
Ann