We are working with Sonar community version 8.6 and SonarAnalyzer.CSharp version 8.17. The active Quality Profile is the Sonar way by default.
We have a ruleset file that contains the following references:
It was unclear from your message - are you using SonarLint? or are you referencing SonarAnalyzer.CSharp as a nuget package?
If you’re using SonarLint, do you use connected mode? It will create a ruleset file that matches your server configuration and your projects will automatically reference it, so you wouldn’t need to make any changes to it.
If you’re using the analyzer as a nuget package, you can download the ruleset file from your SQ server: navigate to the quality profile’s page and look for “SonarLint for Visual Studio Rule Set” exporter at the bottom left.