Hello Sonar Community!
This community is a joint effort between Sonar (us) and you, the members. It’s a place many of you come for help making the most of Sonar offerings. And on our side, Sonar gets a lot out of it too. Your feedback and participation are tremendously valuable to us, and we’d like to start doing a better job of acknowledging that. So for this week we’d like to explicitly thank:
Rule feedback:
-
Thanks @m-gallesio for reporting an issue with
typescript:S107
. Our developers agreed and raised a ticket at SonarSource/SonarJS #4014 -
Merci @candrews for triggering an interesting discussion about
docker:S6497
. Our security researchers are more that happy to keep discussing this. -
Shoutout to @chris.redwine for opening a discussion about
python:S6353
– and helping us understand that our rule description needs to be more clear. (We’ll do this with SONARPY-1400). -
Kudos to @croensch for reporting PHP S107: constructor function parameters are actually fields, count them differently?. It resulted in two different tickets, one each for rules
php:S107
andphp:S1820
)
General product improvements
-
@nth0rpe for letting us know about a Typo in SonarCloud’s GitHub actions gradle analysis guide, which should be fixed soon
-
Thanks @Angelo_Anolin for your feedback on SonarCloud’s new Dark Mode, which will help us make it even better.
-
@msymons gave us a nudge towards Maven 4 support back in June, and now we have a ticket! MSONAR-195
-
@Jos_Abrahams has given us tons of feedback about support for AcuCOBOL (yes, there’s members of this community analyzing COBOL! This week our developers sifted through some more, and created SONARCOBOL-1672, SONARCOBOL-1673 and SONARCOBOL-1674
- @cdelahanty submitted a pull request that was merged this week to better support macOS runners on GitHub actions!
Keeping the lights on:
-
Thanks to @wobo-cj, @alexypuli, @khorwood and @Daniel_Norton for helping us identify and fix an issue with automatic analysis of GitHub PRs this week. As a result we’ve permanently increased the number of concurrent workers for this job.
-
This spring we introduced an integration between SonarCloud and Terraform Cloud. We’ve been waiting for feedback and thanks to @Ari_Becker, we have some (and we might need to fix something)
- @Flavio_Caduff followed up letting us know which rules on the Azure Frontdoor WAF need to be turned off to make SonarQube <> GitHub integration smooth.
This is our first Community roundup – we may have missed something. We still value your contribution!
Feel free to leave your own kudos below – whether it’s another community member or SonarSourcer who helped you out this week, or you want to thank all the users we listed above for improving our ecosystem.
Ann & Colin