Create a custom rule for review dependecis versions

SonarQube Cloud
,
1

I need to create or configure a rule to analyze the library versions I’m using in my development.

For example, I need it to check if I’m using Python 3.10 or the latest version of Node.js.

I’d also like to know if there’s a place in my SonarQube Server where I can do this.

2

Hi,

You’ve filed this under SonarQube Cloud. Are you actually using SonarQube Server? And if so, what version and edition? Because the Advanced Security add-on includes SCA (software composition analysis) which sounds like what you’re looking for.

 
HTH,
Ann