There are cases where rules are valid in SonarQube but are not statically analyzed

There is a source that violates the rule “Spring components should use constructor injection”, but it was not detected by static analysis.


public class XXXXX extends
         XXXX<XXX, XXXX>
         implements XXXX {

     private XXXX XXXX;

I really wanted “@Autowired” to be detected in the above.
Is there any reason?

Hey there.

As noted in the template post – what version of SonarQube are you using?

Hey Colin.
thank you for your reply.
Sorry, the version and deployment information is below.

・SonarQube deployed: Helm


Your version is way past EOL. You should upgrade to either the latest version or the current LTS at your earliest convenience. Your upgrade path is:

7.9.5 → 8.9.10 → 9.9.4 → 10.4 (last step optional)

You may find these resources helpful:

If you have questions about upgrading, feel free to open a new thread for that here.

If your issue persists after upgrade, please come back to us.