Bitbucket Pipe - Rules version

SonarQube Cloud
, ,
1

We use the pipe in a step of our Bitbucket (Cloud) Pipelines

        script:
        - echo Running SonarCloud scan...
        - pipe: sonarsource/sonarcloud-scan:3.1.0
          variables:  
            EXTRA_ARGS: "-Dproject.settings=ci/sonar-scanner.properties"

3.1.0 is the newest available version of this pipe. It runs

  SonarScanner CLI 6.2.1.4610
  Java 17.0.12 Amazon.com Inc. (64-bit)
  Linux 6.1.79 amd64

sonar-scanner-cli is up to 7.0.1.4817, but 6.2.1.4610 was current until mid-Jan 25.

However, we are seeing False Positives for S1848 in CDK code, as reported in S1848: CDK new object… false positive

That issue was resolved in SonarJS 10.12 in Feb24.

Is there a way to trace which version of a rule is used in this pipe?
Does SonarJS feed into sonar-scanner-cli? If not, how should this false positive be addressed? (where should I raise a similar issue?)

2

Hey there!

There’s no correlation between scanner version and rules – the rules are “downloaded” from SonarQube Cloud on each analysis.

So if you’re facing a specific FP, please report it here!

1 Like