SHA1 didn't show in hotspots

SonarQube Server / Community Build
1
  • SonarQube Community v25.11.0.114957
  • SonarQube deployed: zip

I write this in VB.NET

            Using Hash As System.Security.Cryptography.HashAlgorithm = System.Security.Cryptography.SHA1.Create
                HashData = Hash.ComputeHash(Data)
            End Using

If I new SHA1Cng will show in hotspots but when I use SHA1.Create it didn’t show in hotspots

Sonar Community Roundup; Jan 10 - 23, 2026
4

Hi @Footed,

Thank you for reporting this case, I confirm it as False Negative. The missing parenthesis statement seems to confuse the rule.

I’ve crated internal ticket NET-3011 (not accessible from outside, unfortunatelly). I expect this to be fixed in the next release.

8

Hi @Footed, this False Negative has been fixed and is now available on SonarQube Cloud and will soon come to SonarQube Server 2026.2 and SonarQube Community Build 26.3.

1 Like