OWASP top 10 covered for kotlin?

SonarQube
1

Version I am using: 7.9.1

Hi here,
I am trying to do a security scan for my new projects which are based on kotlin. But from here https://rules.sonarsource.com/kotlin, there are only 2 rules for Vulnerability & Security Hotspot.
Is there any plan that we’ll add more rules to cover security related? like OWASP top 10.

Cheers,
He Hainan

3

Hello,

I do confirm this is in our radar and we are about to start the specification phase to define what the Kotlin Analyzer should detect. I can’t give a date but hopefully in the next 6 months.

Regards

4

Thanks Alex!