False Positive/won't fix propagation policy across branches

SonarQube Server / Community Build
1

for Flase positive / won’t fix, what’s the policy about the propagation across different branches? Does this sync only happen with main branch?
Test1 :
1.mark a false positive/won’t fix in branch1.
2. checkout branch 2 from branch1 , so they have same code.
3. do analyze for branch2. FP /won’t fix is not synced to branch2

Test2:
1.mark a issue as false positive/won’t fix in branch1.
2. do analyze on main branch which have the same vulnerable code.
3. FP /won’t fix is synced to main branch

So is this by design? it would be greate if you can share more information on this policy

Thanks in advance!

2

Hi

Yes, and only on branch creation. No synching happens after that.

 
HTH,
Ann

4

Hi Ann,

is there any document for the detail about this?
在 2023年12月5日 00:01，G Ann Campbell via Sonar Community notifications@sonarcommunity.discoursemail.com写道：

| G Ann Campbell ganncamp SonarSourcer
December 4 |

  • | - |

Hi

mason:

Does this sync only happen with main branch?

Yes, and only on branch creation. No synching happens after that.

HTH,
Ann

5

Hi,

I linked to the documentation above.

 
:smiley:
Ann

7

take a look here:

Its solving the propagation with code