Issues not found during local analysis but they are on the cloud

SonarQube for IDE Visual Studio
1

Please provide

  • Operating system:Windows 11 Enterprise
  • Visual Studio version:Microsoft Visual Studio Enterprise 2022 (64-bit) - Current
    Version 17.12.3
  • SonarQube for Visual Studio plugin version: 8.9.0.11507
  • Programming language you’re coding in: c#
  • Is connected mode used: Yes
    • SonarQube Cloud, SonarQube Server, or SonarQube Community Build? (if one of the latter two, which version?): SonarQube Cloud

And a thorough description of the problem / question:
My code is showing issues when analysed on Sonar Qube in the cloud but when I installed Sonar Qube for Visual Studio and I connected to the Cloud Project I don’t get any issues during local analysis.

I can include a verbose log output if needed but it’s quite a long log.

2

Hi,

Welcome to the community!

You don’t get any issues? At all?

Can you share your logs?

 
Thx,
Ann

1 Like
3

Hi Ann,

Attached please find the logs. And Screen shots of the empty issues list.

Eoin
SonarLogs.txt (183.9 KB)

SonarQube Local Security HotSpots
SonarQube Local Security HotSpots879×458 28.1 KB

SonarQube Taint Vulnerabilities
SonarQube Taint Vulnerabilities875×429 33.3 KB

4

Hi Ann,

I am seeing some Sonar issues highlighted in the code of the IDE. And I also see the issues in the “Errors List” tab. So that was a misunderstanding by me.

However I’m seeing s6444 logged as an issue on SonarCloud but I don’t see it locally.

Thanks,

Eoin

6

Hi Eoin,

Thanks for the logs. I’ve flagged this for the experts.

 
Ann

8

Hey Eoin,

Thanks for your question! The issue S6444 in C# is actually a Security Hotspot, which works a bit differently from regular issues in SonarCloud. Due to some technical limitations (mainly API constraints with the Roslyn analyzer), C# Security Hotspots don’t show up in the IDE from the SonarCloud analysis at the moment.

That said, you can still review and manage them directly in SonarCloud’s web interface. If you’re not familiar with how Security Hotspots work, check out this guide: Security Hotspots

Hope that helps! Let me know if you have any other questions. :blush:

Cheers,
Vasileios