SonarQube and Web Application Firewalls

[Colin]

Hey there.

As far I know, we’ve run into two reports about the Azure WAF:

SonarScanner authorization issue after upgrade to 9.9

Hello, I wanted to upgrade from 8.9.10 Developer Edition to 9.9 Developer Edition on my system: -RHEL 8, OpenJDK 17 (updated from 11 as part of installation), PG 12 When running a new scan in Azure DevOps I am getting following error: ##[error]ERROR: Error during SonarScanner execution ERROR: You’re not authorized to run analysis. Please contact the project administrator. No permissions have been changed, I tried also a PAT with full admin permissions resulting in the same error. After ro…

Fixed by disabling Multipart parser detected a possible unmatched boundary.

And this issue related to GitHub-driven authentication:

Azure Frontdoor WAF Managed Policy conflict with github OIDC

Hi Colin, Had to cross check, we actually do use Github App. What I explained in the previous comment, actually matches exactly what is explained in the url you shared about Github app. What would be your suggestion then to proceed? Thanks, F

Still being diagnosed.

Otherwise, we haven’t heard any other reports of issues. Others might be able to chime in, but unfortunately no specific guidance from SonarSource.