# Security Hotspots in the IDE (Sonarqube 8.6)

**URL:** <https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042>\
**Category:** IntelliJ Platform\
**Tags:** security-hotspot, intellij, sonarqube-ide\
**Created:** [January 14, 2021, 4:12pm UTC](https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042 "2021-01-14T16:12:57Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![sebastianrevuelta](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/sebastianrevuelta/32/18414_2.png) [@sebastianrevuelta](https://community.sonarsource.com/u/sebastianrevuelta)\
**Post date:** [January 14, 2021, 4:12pm UTC](https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042/1 "2021-01-14T16:12:57Z")

</div>

According to the release notes from Sonarqube 8.6 now we can see Security Hotspots in some IDEs as IntelliJ. However, I cannot see them, it is still showing (as before) only Bugs.

The release notes says:  
“Triage Security Hotspots in-IDE with a direct link from SonarQube”

Thanks for your help!

---

<div class="post-metadata">

**Author:** ![JBL\_SonarSource](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/jbl_sonarsource/32/64_2.png) [@JBL\_SonarSource](https://community.sonarsource.com/u/JBL_SonarSource)\
**Post date:** [January 14, 2021, 5:10pm UTC](https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042/2 "2021-01-14T17:10:38Z")

</div>

Hello, welcome to the community! And thank you for your question.

To be accurate, Security Hotspots won’t appear in SonarLint in the on-the-fly analysis results.

However, with SonarQube 8.6, you should see this button when browsing a security hotspot on the server:

 ![image](https://europe1.discourse-cdn.com/sonarsource/uploads/sonarcommunity/original/3X/b/a/ba03e497471cb379b4ec05cad5d00653e0a8a986.png)

If IntelliJ IDEA (or any supported IntelliJ-based IDE) is started and SonarLint is enabled, it should show the hotspot in the relevant file, with the appropriate context information to let you decide which course of action to take.

 ![Capture d’écran de 2021-01-14 18-06-07](https://europe1.discourse-cdn.com/sonarsource/uploads/sonarcommunity/original/3X/e/6/e6f005a3b14e37374052065e55e18ff39bbc5413.png)

Please also note that this feature is available in the latest SonarLint for Visual Studio, coming soon for VSCode.

---

<div class="post-metadata">

**Author:** ![sebastianrevuelta](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/sebastianrevuelta/32/18414_2.png) [@sebastianrevuelta](https://community.sonarsource.com/u/sebastianrevuelta)\
**Post date:** [January 15, 2021, 7:27am UTC](https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042/3 "2021-01-15T07:27:05Z")

</div>

Thanks Jean-Baptiste, really good answer. Any idea when it will be available for VSCode? Thanks! Sebas

---

<div class="post-metadata">

**Author:** ![JBL\_SonarSource](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/jbl_sonarsource/32/64_2.png) [@JBL\_SonarSource](https://community.sonarsource.com/u/JBL_SonarSource)\
**Post date:** [January 15, 2021, 8:14am UTC](https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042/4 "2021-01-15T08:14:34Z")

</div>

I can’t promise anything about an ongoing sprint 😉 but late January / early February looks like a fairly accurate estimate right now.

---

<div class="post-metadata">

**Author:** ![sebastianrevuelta](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/sebastianrevuelta/32/18414_2.png) [@sebastianrevuelta](https://community.sonarsource.com/u/sebastianrevuelta)\
**Post date:** [January 15, 2021, 10:04am UTC](https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042/5 "2021-01-15T10:04:46Z")

</div>

Thanks Jean-Baptiste.  
Regards  
Sebas

---

<div class="post-metadata">

**Author:** ![system](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/system/32/31083_2.png) [@system](https://community.sonarsource.com/u/system)\
**Post date:** [January 26, 2021, 8:35am UTC](https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042/6 "2021-01-26T08:35:13Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![JBL\_SonarSource](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/jbl_sonarsource/32/64_2.png) [@JBL\_SonarSource](https://community.sonarsource.com/u/JBL_SonarSource)\
**Post date:** [February 5, 2021, 1:52pm UTC](https://community.sonarsource.com/t/security-hotspots-in-the-ide-sonarqube-8-6/37042/7 "2021-02-05T13:52:10Z")

</div>

For the record @sebastianrevuelta, this feature just got published with [SonarLint for VSCode 1.20.1](https://community.sonarsource.com/t/sonarlint-for-vscode-1-20-1-released-review-security-hotspots-in-the-ide/38162) 🎉

Feedback is welcome, please feel free to open a new thread here!
