Custom rules tag - SonarQube Developer Edition

[alvariin_96 (Álvaro Nicolás)]

Hi!

I would like to know if there are any ways to add a tag in a Sonar rule in SonarQube Develop Edition.

I have this issue in my organization:
The QA team and the Security team are using the same Quality Profile to analyze projects. Then, in the Security team, we have to distinguish security rules from QA rules to know what security issues the apps have.
The problem comes when we discover some rules that don’t have the “Security” Software Quality attribute. Then, it’s very difficult to us to find our rules within the applied Quality Profile.
We wanted to solve this issue by “tagging” the rules with some custom “security” tag or something similar, but we haven’t found a way to do it.
Can someone help us?

Thank you in advance.

Greetings.

[Colin]

Hey there.

Sure, if you have the Administer quality profiles* permission, you can add custom tags to a rule.

@alvariin_96

The problem comes when we discover some rules that don’t have the “Security” Software Quality attribute. Then, it’s very difficult to us to find our rules within the applied Quality Profile.

Do you have some examples to share? Ideally we would just make sure all rules are categorized correctly.