Hello, I’m wondering if there was ever any motion on this? Specifically the example I am dealing with is a traditional .NET project with a web.config or app.config file containing hardcoded credentials in database connection strings. Example app.config with entity framework and regular connection…

Detection of hardcoded credentials in .NET project web.config or app.config file

Rules and Languages New rules / language support

Pierre-Loup_Tristant (Pierre-Loup Tristant) March 7, 2022, 7:35am 2

Yes, we plan to improve the existing rule we have for password detection to support hardcoded credential in connection strings. Here is the ticket to support connection strings from appsettings.json and web.config files.

Pierre-Loup

App.Config / Web.Config Scanning

Topic		Replies	Views
App.Config / Web.Config Scanning SonarQube Cloud	1	714	June 14, 2022
SonarLint doesn't detect hardcoded passwords Visual Studio	5	395	August 5, 2024
No warnings about credentials in Nuget.conf SonarQube Server / Community Build sonarqube , dotnet , sonarqube-ide	2	364	November 22, 2022
I'd like to add Hard-coded credentials are security-sensitive rule to JSON files SonarQube Cloud rules , sonarqube-cloud	2	950	April 4, 2022
Connection String and Notifications SonarCloud SonarQube Cloud csharp , dotnet , security	3	1092	February 23, 2022

Detection of hardcoded credentials in .NET project web.config or app.config file

Related topics