Serverside SonarQube rules not applied

SonarQube for IDE IntelliJ Platform
1

Files are mainly analyzed by local rules. One of the rules not applied locally is “PATH_TRAVERSAL_IN” and mentioned in the debug log as one of “The following rules are enabled on the server, but not available in SonarLint”.

This question was explained in another thread by an outdated server version.

But I assume that versions of sonar plugin and sonar server I’m connected to is almost up to date? So where’s the difference coming from and is there something I can do?

Thanks

IDE: IntelliJ IDEA (build #IU-252.28238.7, Thu, 20 Nov 2025 03:23:00 GMT)
OS: Mac OS X (26.1)
JRE: 21.0.9+10-b1038.76, aarch64 (JetBrains s.r.o.)
JVM: 21.0.9+10-b1038.76 (OpenJDK 64-Bit Server VM)
SonarQube for IDE (11.6.0.83783)

Connected Mode: SonarQube - Enterprise Edition v2025.5 (113872)

2

Hi,

Welcome to the community!

It’s not quite clear to me what rule this is. Do you see an ID that looks like S1234 anywhere? That will help me understand whether it’s supposed to run locally or not. While that other thread you were looking at might have been about being up to date, there are some rules we just don’t run locally because they’re intensive and we don’t want to slow down your IDE.

 
Ann

3

I don’t see any ID in the local log, on the server side there’s also no number, only

Security - Potential Path Traversal

  • Rule ID:findsecbugs:PATH_TRAVERSAL_IN

  • Analysis scope:main sources

  • Rule repo:Find Security Bugs (Java)

4

Hi,

This explains it. That’s a FindSecBugs rule. We don’t run those 3rd-party rules in SonaQube for IDE.

 
HTH,
Ann

5

ok, thank you. Sorry for the circumstances.

1 Like