Hi Team, Can I check whether there are plans to include SQL Injection checks in the Sonar Lint plugin? This feature is very useful for the developers. Right now, I don’t see the plugin doing such checks.

Hi @bxblin , SonarLint - Can it checks for vulnerabilities such as SQL Injection? Short answer: no. We made multiple attempts of enabling advanced security rules in SonarLint, and so far it has not been successful. Those rules are based on a complex algorithm that is currently not IDE friendly, …

SonarLint - Can it checks for vulnerabilities such as SQL Injection? - #2 by Julien_HENRY - Visual Studio

Topic		Replies	Views	Activity
SonarLint for VSCode 3.12 - Enhanced investigation of taint vulnerabilities Releases vscode , sonarqube-ide	0	826	November 14, 2022
Getting started with SonarQube Lint in Visual Studio Code Visual Studio visualstudio , vscode , sonarqube-ide	1	3906	March 4, 2020
Does SonarQube detect SQL injection vulnerabilities in Community Edition? SonarQube Server / Community Build python	1	3351	October 29, 2023
Security Scanning with SonarQube? SonarQube Server / Community Build	5	2216	August 16, 2019
Sonarqube not detecting SQL injection in Java code SonarQube Server / Community Build	2	1259	March 25, 2021

SonarLint for VSCode 3.12 - Enhanced investigation of taint vulnerabilities

Releases

vscode , sonarqube-ide

0

826

November 14, 2022

Getting started with SonarQube Lint in Visual Studio Code

Visual Studio

visualstudio , vscode , sonarqube-ide

1

3906

March 4, 2020

Does SonarQube detect SQL injection vulnerabilities in Community Edition?

SonarQube Server / Community Build

python

1

3351

October 29, 2023

Security Scanning with SonarQube?

SonarQube Server / Community Build

5

2216

August 16, 2019

Sonarqube not detecting SQL injection in Java code

SonarQube Server / Community Build

2

1259

March 25, 2021

SonarLint - Can it checks for vulnerabilities such as SQL Injection?

Related topics