Importing External .NET Security Hotspot Issues

SonarQube Server / Community Build
, ,
1

I’m using an external Roslyn analyzer and would like to import some issues with the category of Security Hotspot. I see in the documentation that this is supported for bugs, code smells, and vulnerabilities, but don’t see any thing for security hotspots.

I’ve tried setting the property of my category to sonar.cs.roslyn.securityhotspotCategories in SonarQube.Analysis.xml, to no avail.

I see that Security Hotspots is a new addition, is this something that is just not yet supported, or am I doing something wrong?

I am running SonarQube Version 7.9.1 (build 27448)

2

Hello @Arjun_Namineni,

Indeed, the Hotspot issue type is relatively new, and has not yet been added as a possible classification when importing roslyn-based external issues.

Thanks for reporting this. As a follow-up, I have created a github issue to track this improvement.

Best,
-Chris