Hi,
when I call :
http://localhost:9000/api/measures/component?component=my-project&metricKeys=new_reliability_rating,reliability_rating,new_security_hotspots_reviewed
(Sonarqube 8.9.x)
I have only “new_reliability_rating” and “reliability_rating” in the response, but nothing about “new_security_hotspots_reviewed”.
Since this metric is used in the new default quality gate (“Security Hotspots Reviewed is less than 100%”) I would expect to always have a value. My guess is you are actually using “new_security_hotspots_reviewed_status” to evaluate the quality gate (which IS always available).