SonarLint hotspots not showing with Visual Studio Code IDE in connected mode and project bound

[mvillanueva (María José Villanueva)]

Hi,
I have a question regarding hotspots in SonarLint. I have been able to configure the connected mode and the project binding, but hotspots are not showing in the Hotspots Tab.

I have SonarQube Community Versión 9.9.3, Visual Studio Code 1.88.1 and SonarLint 4.4.2. Apple M1 Sonoma 14.4.1
SonarLint is configured to get debug data, and the notifications on the connection settings are enabled. The Sonarlint focus is on overall code and the hotspots tab is selected the option “In Open Files”.

When I open a file, the regular issues are detected (I see them on the log and in the problems tab) but no hotspots appear. (See screenshots)

Regarding hotspots, the only message I see in the log is

“Incremental hotspot sync is not supported. Skipping.”

Any ideas?

Thank you in advance.

[Damien_Urruty]

Hola,

Could you give us more details about the Security Hotspot you expect to appear in SonarLint? I suppose it’s a Security Hotspot that appears in your SonarQube instance, we would be interested in the message and rule key (if it’s for Java it should be something like java:SXXXX)

Thanks

[Edison_George]

Hi Damien,

I have a same kind of issue. Using connected mode, Security hotspot not showing in IDE

coding rule [csharpsquid:S2077]

[Damien_Urruty]

Hello @Edison_George,

What IDE are you using?

[Edison_George]

Hi Damien

Visual studio 2022

[Damien_Urruty]

Thanks @Edison_George,

Please note that this is an old thread, a good practice is to open a new thread and not resurrect old ones. Moreover, this thread is about VSCode and not VS 2022, so definitely a separate thread would be better.

That said, I checked in the documentation, and C# Security Hotspots are not supported in VS.

Hope this helped