Dash on Security Report

SonarQube Server / Community Build
, , ,
1

Can someone please help me with why there’s a dash - on the security report output? What does this indicate?

dash on report
dash on report1017×703 52.3 KB

3

Hello @sonarguy,

The dash on the Security Report page means: there is no Security rule corresponding to that specific CWE available in this SonarQube instance, so it means nothing was checked for this specific CWE.

I was surprised to see nothing for CWE-416 for example, and then I remembered that it’s because the C++ rule S3529 corresponding to CWE-416 is qualified as a Bug issue, not a Vulnerability one, this is why you have a dash.

Regards
Alex

1 Like