Hello Team, We are upgrading SonarQube from v8.9 to v9.9 LTS. Due to Java version incompatibility, we discovered that the following plugins are not supported in the SonarQube 9.9 version. sonar-secrets-java-1.3.0 sonar-secrets-javascript-1.3.0 Plugin Reference: GitHub - Skyscanner/sonar-secrets…

Hi, SonarQube offers secrets detection out of the box, and with 10.2 that functionality leapt forward. Are you sure you really still need the plugin? Ann

Hi, This announcement was posted before my earlier answer^ but I just now noticed it: [image] Sonar can detect 110 secret patterns across 60 cloud providers Sonar Updates Dear Community, I’m back with some news about our Secret Detection feature. We made an update to su…

Hi Ann, In 9.9 LTS I see only 5 rules related to secrets. Do I need to upgrade to get the 60+ rules?

Hi @owais , Welcome to the community! Yes, to get the latest rules you’ll need to upgrade to the latest version. Although to be clear, SonarQube 10.2 doesn’t have all those rules. They’ll be available in 10.3, E.T.A. early November. Ann

Thank you for the prompt response. Could you also confirm out of these 100+ rules, if there are any rules for flagging Private Keys, High Entropy String, Hardcoded Password and Hardcoded API Keys used in code

Hi, You can get the full rule list here: [image] Secrets static code analysis Unique rules to find Vulnerabilities in your source code and language agnostic config files HTH, Ann

Could you let me know when this list will be updated with all the upcoming rules? Or if there is a separate link for it?

Hi, That’s the full list. Ann

Hi I was trying to build the Sonar Secret plugin using the official code from GitHub. I want to move those jars to my local Sonar instance (I am not using SonarCloud). Is it possible to download the plugins directly without building my own jars of Sonar Secret? I am facing build issues and compilat…

Sonar Secrets Plugins Support for SonarQube 9.9 LTS

SonarQube Server / Community Build Plugin Development

ganncamp (G Ann Campbell) October 5, 2023, 6:06pm 3

Hi,

This announcement was posted before my earlier answer^ but I just now noticed it:

HTH,
Ann

Topic		Replies	Views
Custom rules 101, update for Sonarqube latest (9.5.0) !? Plugin Development	2	1056	July 28, 2022
Upgrade SonarQube Java Custom Rules Writing rules java , sonarqube	3	634	May 31, 2023
Custom Java rules are not executed after Sonar API upgrade from 9.x to 10.x SonarQube Server / Community Build java	15	791	August 14, 2024
Sonar can detect 110 secret patterns across 60 cloud providers Sonar Updates security , secrets	2	1209	November 8, 2023
SonarQube can detect 400+ secret patterns Sonar Updates security , secrets	0	250	July 9, 2025

Sonar Secrets Plugins Support for SonarQube 9.9 LTS

Related topics