# How to get a detailed list of security hot spots and code smells from the Sonar report

**URL:** <https://community.sonarsource.com/t/how-to-get-a-detailed-list-of-security-hot-spots-and-code-smells-from-the-sonar-report/136448>\
**Category:** SonarQube Server / Community Build\
**Tags:** sonarqube\
**Created:** [March 7, 2025, 12:23pm UTC](https://community.sonarsource.com/t/how-to-get-a-detailed-list-of-security-hot-spots-and-code-smells-from-the-sonar-report/136448 "2025-03-07T12:23:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![PawanKulkarni](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/pawankulkarni/32/67527_2.png) [@PawanKulkarni](https://community.sonarsource.com/u/PawanKulkarni)\
**Post date:** [March 7, 2025, 12:23pm UTC](https://community.sonarsource.com/t/how-to-get-a-detailed-list-of-security-hot-spots-and-code-smells-from-the-sonar-report/136448/1 "2025-03-07T12:23:12Z")

</div>

Must-share information (formatted with [Markdown](https://commonmark.org/help/)):

- which versions are you using (SonarQube Server / Community Build, Scanner, Plugin, and any relevant extension)
- how is SonarQube deployed: Docker
- what are you trying to achieve  
how to get a detailed list of security hot spots and code smells from the Sonar report
- what have you tried so far to achieve this  
via api  
curl -u : “[https://sonar.com/api/measures/component?metricKeys=code\_smells&severities=CRITICAL&component=key](https://sonar.com/api/measures/component?metricKeys=code_smells&severities=CRITICAL&component=key)”

**Do not share screenshots of logs – share the text itself (bonus points for being well-formatted)!**

---

<div class="post-metadata">

**Author:** ![PawanKulkarni](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/pawankulkarni/32/67527_2.png) [@PawanKulkarni](https://community.sonarsource.com/u/PawanKulkarni)\
**Post date:** [March 7, 2025, 12:24pm UTC](https://community.sonarsource.com/t/how-to-get-a-detailed-list-of-security-hot-spots-and-code-smells-from-the-sonar-report/136448/2 "2025-03-07T12:24:49Z")

</div>

need to generate a report preferably a csv file containing detailed list of security hot spots and codesmells for a project

---

<div class="post-metadata">

**Author:** ![ganncamp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/ganncamp/32/1261_2.png) [@ganncamp](https://community.sonarsource.com/u/ganncamp)\
**Post date:** [March 10, 2025, 12:48pm UTC](https://community.sonarsource.com/t/how-to-get-a-detailed-list-of-security-hot-spots-and-code-smells-from-the-sonar-report/136448/3 "2025-03-10T12:48:27Z")

</div>

Hi,

Welcome to the community!

You’re looking for the [regulatory report](https://docs.sonarsource.com/sonarqube-server/latest/user-guide/viewing-reports/regulatory-reports/), which starts in [Enterprise Edition](https://www.sonarsource.com/plans-and-pricing/)($$).

&nbsp;  
HTH,  
Ann

---

<div class="post-metadata">

**Author:** ![PawanKulkarni](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/pawankulkarni/32/67527_2.png) [@PawanKulkarni](https://community.sonarsource.com/u/PawanKulkarni)\
**Post date:** [March 11, 2025, 5:37pm UTC](https://community.sonarsource.com/t/how-to-get-a-detailed-list-of-security-hot-spots-and-code-smells-from-the-sonar-report/136448/4 "2025-03-11T17:37:02Z")

</div>

Thanks Ann, we are using the EE version, please guide how to use this

---

<div class="post-metadata">

**Author:** ![ganncamp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/ganncamp/32/1261_2.png) [@ganncamp](https://community.sonarsource.com/u/ganncamp)\
**Post date:** [March 11, 2025, 5:52pm UTC](https://community.sonarsource.com/t/how-to-get-a-detailed-list-of-security-hot-spots-and-code-smells-from-the-sonar-report/136448/5 "2025-03-11T17:52:34Z")

</div>

Hi,

My previous answer included a docs link. Did you check it?

&nbsp;  
Ann