SonarQube 10.2
I can’t figure out a way to bulk change a hotspot review. Example I have 10 hotspots all the same issue. Is there a way to mark them all safe without having to do it one at a time?
Thank you,
Justin
SonarQube 10.2
I can’t figure out a way to bulk change a hotspot review. Example I have 10 hotspots all the same issue. Is there a way to mark them all safe without having to do it one at a time?
Thank you,
Justin
Hey there.
It’s not possible to bulk review hotspots – but the concept of hotspots will go away pretty soon as we move to our new Clean Code Taxonomy, so I don’t expect any improvements here. But once those issues are just normal issues, you’ll be able to bulk change them.
Thank you for the reply.
Hi Colin,
Surprise, surprise ![]()
As project manager for a devsecops project in 2024 - one of the goals is to improve the use of tools such as Sonarqube - one of my suggestions is the mandatory use of security hotspots in the quality gates.
There are findings that need to be evaluated in context, i.e. a cookie may keep my favorite colour,
but no secrets …
If the quality gate contains the condition that security hotspots are checked 100%, Sonarqube is automatically part of the code review process - and if there is no code review process yet, one must be established.
Where do i find more informations / are there more details about the successor of security hotspots ?
Gilbert
Hi @Colin ,
searched the community forum for postings related to
but i found only postings about the Sonarlint flavors supporting the review of hotspots.
It is important - especially for the users of Sonarqube latest - to be informed before such changes to be able to plan correctly.
Where to find more details ?
Gilbert