SonarCloud dashboards not generated for Microsoft Fabric notebooks – supported or not?

SonarQube Cloud
, , , ,
1

Hi Team,

We have configured SonarCloud analysis successfully in an Azure DevOps pipeline, and the scan completes without errors. However, we do not see the usual dashboards (Security, Reliability, Maintainability).

Repository details:

  • The repository contains only Microsoft Fabric notebooks (exported as *.Notebook/notebook-content.py) and JSON configuration files

  • There are no standalone Python modules (no standard .py source folders like /src)

  • SonarCloud analysis runs using CLI mode

  • The project appears in SonarCloud, but no code-quality metrics are shown

Observed behaviour:

  • Analysis completes successfully

  • No Bugs, Vulnerabilities, Code Smells, or Maintainability metrics are generated

  • Background tasks show either zero or ignored lines of code

Question:

  1. Are Microsoft Fabric notebooks (exported as notebook-content.py) officially supported for SonarCloud code-quality analysis?

  2. If a repository contains only Fabric notebooks and JSON files, is it expected that SonarCloud will not generate Security, Reliability, and Maintainability dashboards?

  3. Is there any recommended or supported approach to analyse Fabric notebooks with SonarCloud, or is refactoring logic into standard Python modules the only option?

We would like to confirm whether this is a known limitation or if any configuration changes are recommended.sonar task: SonarCloudPrepare@3
inputs:
SonarCloud: ‘SonarCloud-Service-Connection’
organization: ‘your-org’
scannerMode: ‘CLI’
configMode: ‘manual’
cliProjectKey: ‘sample_project’
cliProjectName: ‘sample_project’
extraProperties: |
sonar.python.version=3
sonar.sources=.
sonar.exclusions=/*.Notebook/,/notebook-content.py,/*.json

  • task: SonarCloudAnalyze@3

  • task: SonarCloudPublish@3

Thanks in advance for your guidance.

2

Could someone assist me with this, please?

4

Hi,

Sorry for the delay in responding. This fell through the holiday cracks.

It’s flagged for the language experts.

 
Ann

7

Thanks for the update! I appreciate you flagging this for the language experts.

Please let me know if they need any specific details or file samples to investigate further. For reference

Happy to provide a scrubbed code snippet if it helps the team determine if an update is required. Looking forward to your feedback!"

1 Like
8

Hi,

A scrubbed code snippet is probably going to be needed. Could you go ahead & provide that?

 
Thx,
Ann

9

Hi @bisiri !

Thank you for your report.

Looking at the configuration you provided, I have the impression that all relevant .py files are excluded from the analysis:

sonar.exclusions=/*.Notebook/,/notebook-content.py,/*.json

I.e. the exclusions here appear to fit the file pattern you explained here:

The repository contains only Microsoft Fabric notebooks (exported as *.Notebook/notebook-content.py) and JSON configuration files

Anything that is covered by sonar.exclusions will not be analyzed by our scanner.

Can you change the analysis properties such that the exclusions do not cover the py files and let us now if that changed the results for you? For example like this:

sonar.exclusions=**/*.json

In general, as Ann mentioned, a minimal reproducer example would help us to further investigate the issue you are experiencing.

Best regards,

Anton