SonarCloud Springboot .properties file scanning

[Samuel_Mbugua_Nganga (Samuel Mbugua Ngángá)]

• Hello good peeps, Am trying to scan the application.properties file on my SpringBoot application, I have tried a few ways to include the file on the scans to identify some hardcoded staff but I don’t see it on the code coverage.
• Has anyone done this before?

[Colin]

Hey there.

Take a look at the answe here:

Scanning and rules not being applicable on application.properties file of a java project

Hello, The behavior you are describing is the expected one even if it’s not the best. As of now with SQ 9.9.1, Sonar scans for secrets only the files that are indexed by a given language analyzer. Because there is no analyzer dedicated to .properties files, these files are ignored by the Secret Detection engine. This is something we would like to improve in the next versions. Alex

[Samuel_Mbugua_Nganga (Samuel Mbugua Ngángá)]

Awesome!, Looking forward for such feature in next version.

Thanks!