Hi SonarQube Team,
Why are the OWASP categories empty in SonarQube Community Edition v26.1.0.118079?
When I expand the OWASP dropdowns (e.g. OWASP Top 10 2025), no rules are shown.
Is this expected behavior for the Community Edition, or is it a bug?
Hi,
Welcome to the community!
SonarQube Community Edition offers some basic security rules, but the real security offering is available starting in Developer Edition($) and on SonarQube Cloud.
That said, these categories should not be empty, even in Community Build. Try forcing an ElasticSearch reindex. That should fix the problem.
HTH,
Ann