SonarQube version: 10.6 How SonarQube is deployed: zip What I’m trying to achieve: Create a custom Security Hotspot rule from a template. What I’ve tried so far to achieve this: Use the standard “Create Custom Rule” dialogue.
We frequently create custom Security Hotspots from template rules (like reviewing particular types or methods which we consider to be security-sensitive).
It looks like this use-case was broken recently when you guys redesigned the “Create Custom rule” to remove the now-deprecated issue types.
Now all we get is Category, Attribute, Software Quality, and Severity.
This all looks like Issue terminology, with no Security Hotspots in sight.
To my knowledge, Security Hotspots are meant to be first-class citizens in SonarQube and are not deprecated, so I’m finding that pretty surprising.
Worse, I can’t edit the (many) custom Security Hotspot rules that we already have.
The Save button is disabled in the Update Custom Rule dialogue, with no explanation.
There used to be an option to select the rule type in the Create Custom Rule UI, with Security Hotspot being one of those rule types. There is no equivalent functionality in the new UI.
I wanted to follow up with you on the issue you spotted. SonarQube Server (the new name for SonarQube) 10.8 is now available. You can now create custom rules from templates and select ‘security hotspot’ as the type again.
