Hi R Developers and Data Scientists,
Sonar now supports analyzing your R code, so that the scripts that that back your clinical trials, financial analysis, or actuarial models can now be verified against our quality rules. This will simplify audit and compliance tracking letting you easily demonstrate that the code backing your strategic bets is scanned and verified.
If your R code lives in R Markdown files, the new analyzer will scan it as well meaning that you can work within your existing notebook while still getting first-class scanning support.
The highlights of the release are:
- 82 R reliability and maintainability rules in the Sonar way quality profile
- Secret scanning for all
.Rand.rmdfiles uploaded - Scripts and notebooks analyzed together:
.Rfiles and the R chunks inside R Markdown (.rmd) files are analyzed - Duplication detection: copy-paste detection across your R code, a common risk with research code
- lintr import: import lintr findings alongside Sonar issues
- covr coverage import: import test coverage reports emitted by covr
Scanning is available now in SonarQube Cloud and will release with 2026.5 for SonarQube Server. Start scanning your projects today and let us know your feedback. We’d love to hear what rules and languages we should expand to cover next.