Support of YAML/JSON by the Azure DevOps SonarCloud extension?

[Aki (Aki Matsubara)]

Will YAML/JSON secret detection be supported in the Azure DevOps SonarCloud extension in the future, or is it planned to be added?

[Colin]

Hey there.

Secrets in YAML/JSON files should be detected today, you just need to activate it as described in this post.

Sonar now analyzes YAML and JSON files for secrets

Hello Community, We’re excited to announce a significant enhancement to our secret detection capabilities: Sonar now analyzes YAML and JSON files for leaked secrets! The Problem YAML and JSON files are widely used to configure and deliver software. It’s easy to accidentally paste a secret into these files, which can then be pushed to your repository. The Solution Sonar’s analysis engine now scans YAML and JSON files to detect leaked secrets. [image] How to Use Because YAML and JSON file…

There’s no update that needs to be made to the extension.