Scanner for .NET/ADO SonarCloud Prepare Task failing with Plugin resource not found: securitycsharp

SonarQube Cloud
, , ,
1

  • CI system used: Azure DevOps

  • Languages of the repository: C#

  • Error observed

    Plugin resource not found: securitycsharpfrontend, version 11.35.0.47322. Resource: SonarAnalyzer.Security.CSharp-11.35.0.47322.zip.

  • Steps to reproduce

Starting: Sonar Cloud Prepare

==============================================================================

Task : Prepare Analysis Configuration

Description : Prepare SonarQube Cloud analysis configuration

Version : 3.4.3

Author : sonarsource

Help : [More Information](Azure DevOps Extension | SonarQube Cloud | Sonar Documentation)

==============================================================================

[INFO] SonarQube Cloud: Server version: 8.0.0.94365

[INFO] SonarQube Cloud: Default branch of this repository is ‘refs/heads/develop’

D:\a\_tasks\SonarCloudPrepare_14d9cde6-c1da-4d55-aa01-2965cd301255\3.4.3\classic-sonar-scanner-msbuild\SonarScanner.MSBuild.exe begin /k:smart-int-development_FlowTransformationService /o:smart-int-development

SonarScanner for MSBuild 10.3

Using the .NET Framework version of the Scanner for MSBuild

Pre-processing started.

Preparing working directories…

08:47:25.14 Updating build integration targets…

08:47:25.97 Using SonarCloud.

08:47:26.188 The JRE provisioning is a time consuming operation.

JRE provisioned: OpenJDK21U-jre_x64_windows_hotspot_21.0.9_10.zip.

If you already have a compatible java version installed, please add either the parameter “/d:sonar.scanner.skipJreProvisioning=true” or “/d:sonar.scanner.javaExePath=”.

08:47:29.518 Fetching analysis configuration settings…

08:47:31.562 Provisioning analyzer assemblies for cs…

08:47:31.564 Installing required Roslyn analyzers…

08:47:31.564 Processing plugin: architecturecsharpfrontend version 2.32.0.10055

08:47:31.749 Processing plugin: securitycsharpfrontend version 11.35.0.47322

2

Same here

SonarScanner for .NET 11.2.1
Using the .NET Core version of the Scanner for .NET
Pre-processing started.
Preparing working directories...
08:51:49.657  Updating build integration targets...
08:51:50.086  Using SonarCloud.
08:51:51.812  The JRE provisioning is a time consuming operation.
JRE provisioned: OpenJDK21U-jre_x64_linux_hotspot_21.0.9_10.tar.gz.
If you already have a compatible Java version installed, please add either the parameter "/d:sonar.scanner.skipJreProvisioning=true" or "/d:sonar.scanner.javaExePath=<PATH>".
08:51:52.063  Fetching analysis configuration settings...
08:51:53.206  Provisioning analyzer assemblies for cs...
08:51:53.206  Installing required Roslyn analyzers...
08:51:53.206  Processing plugin: architecturecsharpfrontend version 2.32.0.10055
08:51:53.280  Processing plugin: securitycsharpfrontend version 11.35.0.47322
Unhandled exception. System.IO.FileNotFoundException: Plugin resource not found: securitycsharpfrontend, version 11.35.0.47322. Resource: SonarAnalyzer.Security.CSharp-11.35.0.47322.zip.
   at SonarScanner.MSBuild.PreProcessor.Roslyn.EmbeddedAnalyzerInstaller.FetchResourceFromServer(Plugin plugin, String targetDir)
   at SonarScanner.MSBuild.PreProcessor.Roslyn.EmbeddedAnalyzerInstaller.GetPluginResourceFiles(Plugin plugin)
   at SonarScanner.MSBuild.PreProcessor.Roslyn.EmbeddedAnalyzerInstaller.InstallAssemblies(IEnumerable`1 plugins)
   at SonarScanner.MSBuild.PreProcessor.Roslyn.RoslynAnalyzerProvider.FetchAnalyzerPlugins()
   at SonarScanner.MSBuild.PreProcessor.Roslyn.RoslynAnalyzerProvider.SetupAnalyzer()
   at SonarScanner.MSBuild.PreProcessor.PreProcessor.FetchArgumentsAndRuleSets(ISonarWebServer server, ProcessedArgs args, BuildSettings settings)
   at SonarScanner.MSBuild.PreProcessor.PreProcessor.DoExecute(BuildSettings buildSettings, ProcessedArgs localSettings)
   at SonarScanner.MSBuild.PreProcessor.PreProcessor.Execute(IEnumerable`1 args)
   at SonarScanner.MSBuild.BootstrapperClass.PreProcess()
   at SonarScanner.MSBuild.BootstrapperClass.Execute()
   at SonarScanner.MSBuild.Program.Execute(String[] args, IRuntime runtime)
   at SonarScanner.MSBuild.Program.Main(String[] args)
   at SonarScanner.MSBuild.Program.<Main>(String[] args)
3

We are also seeing this issue

4

Can confirm we are experiencing this issue also

5

Using Azure DevOps Pipeline. CI build starts failing today with error:

##[error]Unhandled exception. System.IO.FileNotFoundException: Plugin resource not found: securitycsharpfrontend, version 11.35.0.47322. Resource: SonarAnalyzer.Security.CSharp-11.35.0.47322.zip.

task: SonarCloudPrepare@4

Language: .Net, C# and JS

Any ideas?

6

We are also facing the same issue

7

We are seeing this too. We are on V4 of the task

Starting: SonarCloudPrepare
==============================================================================
Task         : Prepare Analysis Configuration
Description  : Prepare SonarQube Cloud analysis configuration
Version      : 4.2.5
Author       : sonarsource
Help         : [More Information](https://docs.sonarcloud.io/advanced-setup/ci-based-analysis/sonarcloud-extension-for-azure-devops/)
==============================================================================
[INFO]  SonarQube Cloud: Server version: 8.0.0.94365
C:\agent-work\_tasks\SonarCloudPrepare_14d9cde6-c1da-4d55-aa01-2965cd301255\4.2.5\classic-sonar-scanner-msbuild\SonarScanner.MSBuild.exe begin /k:Atmos-International_All /o:atmos-international
SonarScanner for .NET 11.2.1
Using the .NET Framework version of the Scanner for .NET
Pre-processing started.
Preparing working directories...
08:44:06.997  Updating build integration targets...
08:44:07.753  Using SonarCloud.
08:44:11.216  The JRE provisioning is a time consuming operation.
JRE provisioned: OpenJDK21U-jre_x64_windows_hotspot_21.0.9_10.zip.
If you already have a compatible Java version installed, please add either the parameter "/d:sonar.scanner.skipJreProvisioning=true" or "/d:sonar.scanner.javaExePath=<PATH>".
08:44:12.314  Fetching analysis configuration settings...
08:44:13.743  Provisioning analyzer assemblies for cs...
08:44:13.743  Installing required Roslyn analyzers...
08:44:13.745  Processing plugin: architecturecsharpfrontend version 2.32.0.10055
08:44:13.877  Processing plugin: securitycsharpfrontend version 11.35.0.47322

##[error]Unhandled Exception:
##[error]System.IO.FileNotFoundException: Plugin resource not found: securitycsharpfrontend, version 11.35.0.47322. Resource: SonarAnalyzer.Security.CSharp-11.35.0.47322.zip.
8

See also Scanner for .NET/ADO SonarCloud Prepare Task failing with Plugin resource not found: securitycsharp - #6 by Vijay_Kumar1

9

Hello,

Our SonarCube Cloud integration seems to have broken over night.

2026-07-01T09:19:07.5355473Z #19 0.358 SonarScanner for .NET 11.2.1
2026-07-01T09:19:07.6754678Z #19 0.359 Using the .NET Core version of the Scanner for .NET
2026-07-01T09:19:07.6755208Z #19 0.444 Pre-processing started.
2026-07-01T09:19:07.6755505Z #19 0.444 Preparing working directories...
2026-07-01T09:19:07.6755827Z #19 0.498 09:19:07.674  Updating build integration targets...
2026-07-01T09:19:08.4855986Z #19 1.308 09:19:08.484  Using SonarCloud.
2026-07-01T09:19:11.0188848Z #19 3.841 09:19:11.018  The JRE provisioning is a time consuming operation.
2026-07-01T09:19:11.0189528Z #19 3.841 JRE provisioned: OpenJDK21U-jre_x64_linux_hotspot_21.0.9_10.tar.gz.
2026-07-01T09:19:11.0190146Z #19 3.841 If you already have a compatible Java version installed, please add either the parameter "/d:sonar.scanner.skipJreProvisioning=true" or "/d:sonar.scanner.javaExePath=<PATH>".
2026-07-01T09:19:11.4406232Z #19 4.263 09:19:11.439  Fetching analysis configuration settings...
2026-07-01T09:19:12.7449613Z #19 5.567 09:19:12.743  Provisioning analyzer assemblies for cs...
2026-07-01T09:19:12.8497763Z #19 5.568 09:19:12.744  Installing required Roslyn analyzers...
2026-07-01T09:19:12.8498494Z #19 5.568 09:19:12.745  Processing plugin: architecturecsharpfrontend version 2.32.0.10055
2026-07-01T09:19:12.8499168Z #19 5.640 09:19:12.817  Processing plugin: securitycsharpfrontend version 11.35.0.47322
2026-07-01T09:19:13.0083395Z #19 5.671 Unhandled exception. System.IO.FileNotFoundException: Plugin resource not found: securitycsharpfrontend, version 11.35.0.47322. Resource: SonarAnalyzer.Security.CSharp-11.35.0.47322.zip.
2026-07-01T09:19:13.0086716Z #19 5.680    at SonarScanner.MSBuild.PreProcessor.Roslyn.EmbeddedAnalyzerInstaller.FetchResourceFromServer(Plugin plugin, String targetDir)
2026-07-01T09:19:13.0087341Z #19 5.680    at SonarScanner.MSBuild.PreProcessor.Roslyn.EmbeddedAnalyzerInstaller.GetPluginResourceFiles(Plugin plugin)
2026-07-01T09:19:13.0087928Z #19 5.680    at SonarScanner.MSBuild.PreProcessor.Roslyn.EmbeddedAnalyzerInstaller.InstallAssemblies(IEnumerable`1 plugins)
2026-07-01T09:19:13.0088679Z #19 5.680    at SonarScanner.MSBuild.PreProcessor.Roslyn.RoslynAnalyzerProvider.FetchAnalyzerPlugins()
2026-07-01T09:19:13.0089190Z #19 5.680    at SonarScanner.MSBuild.PreProcessor.Roslyn.RoslynAnalyzerProvider.SetupAnalyzer()
2026-07-01T09:19:13.0089753Z #19 5.680    at SonarScanner.MSBuild.PreProcessor.PreProcessor.FetchArgumentsAndRuleSets(ISonarWebServer server, ProcessedArgs args, BuildSettings settings)
2026-07-01T09:19:13.0090352Z #19 5.680    at SonarScanner.MSBuild.PreProcessor.PreProcessor.DoExecute(BuildSettings buildSettings, ProcessedArgs localSettings)
2026-07-01T09:19:13.0090896Z #19 5.680    at SonarScanner.MSBuild.PreProcessor.PreProcessor.Execute(IEnumerable`1 args)
2026-07-01T09:19:13.0091367Z #19 5.680    at SonarScanner.MSBuild.BootstrapperClass.PreProcess()
2026-07-01T09:19:13.0091948Z #19 5.680    at SonarScanner.MSBuild.BootstrapperClass.Execute()
2026-07-01T09:19:13.0092408Z #19 5.680    at SonarScanner.MSBuild.Program.Execute(String[] args, IRuntime runtime)
2026-07-01T09:19:13.0092885Z #19 5.680    at SonarScanner.MSBuild.Program.Main(String[] args)
2026-07-01T09:19:13.0093317Z #19 5.680    at SonarScanner.MSBuild.Program.<Main>(String[] args)

For some reason, downloading the plugins seems to fail.
Has something changed on Sonar’s side that this version is no longer available?

10

Same issue. All ADO builds in my org stopped working. Both Windows and Linux. This is critical.

11

Same issue. All ADO builds in my org stopped working. Both Windows and Linux. This is critical.

12

Same here
System.IO.FileNotFoundException: Plugin resource not found: securitycsharpfrontend, version 11.35.0.47322. Resource: SonarAnalyzer.Security.CSharp-11.35.0.47322.zip

13

Yup - looks to be affecting any .net use of sonar across both our harness and github action scans. Major issue & needs immediate attention.

14

Same for us: Failed to download plugins

15

Hi @ganncamp would it be possible to look at this issue? It looks to be impacting many users.

17

Hey all, I’ve merged a few different threads here to centralize the communications. We are tracking this incident internally, thanks for all the reports.

For now, we think the incident window is (was) from 10:34 CEST to 11:23 CEST. I would like to clarify: has anyone experienced a failed analysis outside of this window? I know some of you have posted replies later than 11:23 CEST, but could you confirm if you ran into the issue later than 11:23 CEST? If so, could you please share logs?

18

Working now, sorry for the dup

19

Yes, it is working now.

20

Thanks for the confirmation! We’re considering the incident to be resolved. You can read more about it on our status page: https://status.sonarqube.com/incidents/zrf8qn8k3qpr