Hey @Claus_Jessing
I get that, but without more info, it’s tough to reproduce an issue like this. For example, if I start up WebStorm and open a project (this sample project), I can easily get the web:AvoidCommentedOutCode check by adding some code comments.
Analysing 'sample.xhtml' (ID 9dcdfde0-292a-45b9-be22-2ce0d74d2315)...
[2025-01-27T10:54:40.117] [SonarLint Server RPC request executor] INFO sonarlint - Triggering analysis with configuration: [
baseDir: /Users/colinmueller/Source/sonar-scanning-examples
extraProperties: {sonar.updatecenter.cache.ttl=3600000, sonaranalyzer-cs.nuget.packageVersion=10.3.0.106239, sonaranalyzer.security.cs.pluginVersion=10.9.0.33961, sonar.auth.bitbucket.allowUsersToSignUp=true, sonar.cs.ignoreHeaderComments=true, sonar.c.file.suffixes=.c,.h, sonar.typescript.file.suffixes=.ts,.tsx,.cts,.mts, sonar.auth.github.enabled=false, sonar.python.coverage.reportPaths=coverage-reports/*coverage-*.xml, sonaranalyzer-vbnet.nuget.packageVersion=10.3.0.106239, sonar.text.activate=true, sonar.cobol.dialect=ibm-enterprise-cobol, provisioning.gitlab.enabled=false, sonar.go.file.suffixes=.go, sonar.cpd.cobol.minimumLines=30, sonar.cobol.exec.recoveryMode=true, sonar.cs.analyzeRazorCode=true, sonar.auth.saml.applicationId=sonarqube, dc5.mutationAnalysis.effort.survivedMutant=1.0, sonar.python.xunit.skipDetails=false, sonar.ipynb.file.suffixes=ipynb, sonar.dbcleaner.weeksBeforeKeepingOnlyAnalysesWithVersion=104, sonar.plsql.jdbc.driver.class=oracle.jdbc.OracleDriver, sonar.qualitygate.ignoreSmallChanges=true, sonar.auth.saml.signature.enabled=false, sonar.go.exclusions=**/vendor/**, sonar.php.exclusions=**/vendor/**, sonar.js.internal.bundlePath=/Users/colinmueller/Library/Application Support/JetBrains/WebStorm2024.3/plugins/sonarlint-intellij/plugins/eslint-bridge, sonar.terraform.file.suffixes=.tf, sonar.forceAuthentication=true, sonar.announcement.displayMessage=false, sonar.notifications.delay=60, sonar.cpp.file.suffixes=.cc,.cpp,.cxx,.c++,.hh,.hpp,.hxx,.h++,.ipp,.ixx,.mxx,.cppm,.ccm,.cxxm,.c++m, sonar.swift.file.suffixes=.swift, sonar.vbnet.roslyn.ignoreIssues=false, sonar.plsql.ignoreHeaderComments=false, sonar.flex.file.suffixes=as, dc5.mutationAnalysis.pitest.sensor.reports.directory=target/pit-reports, sonar.multi-quality-mode.enabled=true, sonar.jcl.file.suffixes=.jcl, sonaranalyzer.security.cs.nuget.packageVersion=10.9.0.33961, sonar.filesize.limit=20, sonar.auth.gitlab.groupsSync=false, sonar.auth.github.apiUrl=https://api.github.com/, sonar.ruby.file.suffixes=.rb, sonaranalyzer-cs.ruleNamespace=SonarAnalyzer.Enterprise.CSharp, sonar.auth.github.allowUsersToSignUp=true, sonar.pli.extralingualCharacters=#@$, sonar.cs.analyzeGeneratedCode=false, sonar.azureresourcemanager.file.identifier=https://schema.management.azure.com/schemas/,http://schema.management.azure.com/schemas/, sonar.python.xunit.reportPath=xunit-reports/xunit-result-*.xml, sonar.java.jvmframeworkconfig.file.patterns=**/src/main/resources/**/*app*.properties,**/src/main/resources/**/*app*.yaml,**/src/main/resources/**/*app*.yml, dc5.mutationAnalysis.effort.mutantKill=5min, sonar.pli.marginLeft=2, sonar.builtInQualityProfiles.disableNotificationOnUpdate=false, sonar.javascript.globals=angular,goog,google,OpenLayers,d3,dojo,dojox,dijit,Backbone,moment,casper,_,sap, sonar.dbcleaner.auditHousekeeping=Monthly, sonar.dbcleaner.hoursBeforeKeepingOnlyOneSnapshotByDay=24, sonar.yaml.file.suffixes=.yaml,.yml, sonar.dbcleaner.daysBeforeDeletingInactiveBranchesAndPRs=30, sonar.auth.bitbucket.enabled=false, sonar.terraform.activate=true, sonar.dependencyCheck.htmlReportPath=${WORKSPACE}/dependency-check-report.html, sonar.css.file.suffixes=.css,.less,.scss,.sass, sonar.cpd.abap.minimumTokens=100, sonar.docker.file.patterns=Dockerfile,*.dockerfile, sonar.auth.github.webUrl=https://github.com/, sonar.dbcleaner.branchesToKeepWhenInactive=main,master,develop,trunk, sonar.dependencyCheck.useFilePath=false, sonar.ce.parallelProjectTasks=true, sonar.html.file.suffixes=.html,.xhtml,.cshtml,.vbhtml,.aspx,.ascx,.rhtml,.erb,.shtm,.shtml,.cmp,.twig, sonaranalyzer-vbnet.nuget.packageId=SonarAnalyzer.Enterprise.VisualBasic, sonar.php.frameworkDetection=true, sonar.auth.gitlab.enabled=false, sonar.vb.file.suffixes=.bas,.frm,.ctl, sonar.cpd.cross_project=false, sonaranalyzer-vbnet.pluginVersion=10.3.0.106239, sonar.dependencyCheck.summarize=false, sonar.vbnet.ignoreHeaderComments=true, sonar.rpg.leftMarginWidth=12, sonaranalyzer.security.cs.analyzerId=SonarAnalyzer.Security, sonaranalyzer.security.cs.nuget.packageId=SonarAnalyzer.Security, dc5.mutationAnalysis.missingCoverage.force2zero=false, sonar.auth.github.groupsSync=false, sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByWeek=4, dc5.mutationAnalysis.effort.missingCoverage=1.0, sonaranalyzer-vbnet.analyzerId=SonarAnalyzer.Enterprise.VisualBasic, sonar.scala.file.suffixes=.scala, sonar.cs.roslyn.ignoreIssues=false, sonar.cobol.byteBasedColumnCount=false, sonar.governance.report.project.branch.frequency=Monthly, sonar.cloudformation.activate=true, sonar.auth.token.max.allowed.lifetime=No expiration, sonar.pli.marginRight=72, sonaranalyzer-cs.pluginKey=csharpenterprise, sonar.kubernetes.activate=true, sonar.cpd.cobol.minimumTokens=100, sonar.java.ignoreUnnamedModuleForSplitPackage=False, sonar.json.file.suffixes=.json, dc5.mutationAnalysis.pitest.kotlin.sensor.enabled=true, sonaranalyzer.security.cs.pluginKey=securitycsharpfrontend, sonar.vb.ignoreHeaderComments=true, sonar.apex.file.suffixes=.cls,.trigger, sonaranalyzer-vbnet.ruleNamespace=SonarAnalyzer.Enterprise.VisualBasic, sonar.cloudformation.file.identifier=AWSTemplateFormatVersion, sonar.auth.saml.providerName=SAML, provisioning.github.project.visibility.enabled=true, sonar.dbcleaner.daysBeforeDeletingAnticipatedTransitions=30, sonar.javascript.ignoreHeaderComments=true, sonar.dbcleaner.daysBeforeDeletingClosedIssues=30, sonar.dependencyCheck.severity.high=7.0, sonar.java.enablePreview=False, sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByMonth=52, sonar.lf.gravatarServerUrl=https://secure.gravatar.com/avatar/{EMAIL_MD5}.jpg?s={SIZE}&d=identicon, sonar.dependencyCheck.skip=false, sonar.objc.file.suffixes=.m, sonar.ruby.coverage.reportPaths=coverage/.resultset.json, sonar.text.inclusions=**/*.sh,**/*.bash,**/*.zsh,**/*.ksh,**/*.ps1,**/*.properties,**/*.conf,**/*.pem,**/*.config,.env,.aws/config, sonar.governance.report.view.frequency=Monthly, sonar.cobol.sourceFormat=fixed, sonar.qualityProfiles.allowDisableInheritedRules=true, sonaranalyzer-cs.staticResourceName=SonarAnalyzer-10.3.0.106239.zip, sonar.notifications.runningDelayBeforeReportingStatus=600, sonar.auth.gitlab.allowUsersToSignUp=true, sonar.projectCreation.mainBranchName=main, sonar.cpd.cobol.ignoreLiteral=true, sonar.jsp.file.suffixes=.jsp,.jspf,.jspx, sonar.pli.ignoreHeaderComments=true, sonar.javascript.maxFileSize=1000, sonaranalyzer-cs.nuget.packageId=SonarAnalyzer.Enterprise.CSharp, sonar.javascript.environments=amd,applescript,atomtest,browser,commonjs,embertest,greasemonkey,jasmine,jest,jquery,meteor,mocha,mongo,nashorn,node,phantomjs,prototypejs,protractor,qunit,serviceworker,shared-node-browser,shelljs,webextensions,worker, sonar.authenticator.downcase=false, sonar.scm.disabled=false, sonar.ruby.exclusions=**/vendor/**, sonar.dart.file.suffixes=.dart, sonar.ansible.activate=true, sonar.auth.saml.enabled=false, sonar.vbnet.file.suffixes=.vb, sonaranalyzer-cs.analyzerId=SonarAnalyzer.Enterprise.CSharp, sonar.rpg.file.suffixes=.rpg,.rpgle,.sqlrpgle,.RPG,.RPGLE,.SQLRPGLE, dc5.mutationAnalysis.pitest.java.sensor.enabled=true, sonar.core.id=E3FE7274-AZRSgwcUY98Iyzjf5rq7, sonar.dependencyCheck.jsonReportPath=${WORKSPACE}/dependency-check-report.json, sonar.dependencyCheck.severity.medium=4.0, sonar.cfamily.generateComputedConfig=false, sonar.cobol.adaprep.activation=false, sonar.abap.file.suffixes=.abap,.ab4,.flow,.asprog, dc5.mutationAnalysis.experimentalFeatures.enabled=false, sonar.cfamily.ignoreHeaderComments=true, sonar.technicalDebt.ratingGrid=0.05,0.1,0.2,0.5, sonar.technicalDebt.developmentCost=30, sonar.lf.enableGravatar=false, sonar.validateWebhooks=true, sonar.docker.activate=true, sonar.python.file.suffixes=py, sonaranalyzer-cs.pluginVersion=10.3.0.106239, sonaranalyzer.security.cs.staticResourceName=SonarAnalyzer.Security-10.9.0.33961.zip, sonar.cs.file.suffixes=.cs,.razor, sonar.developerAggregatedInfo.disabled=false, sonar.plsql.file.suffixes=sql,pks,pkb, sonaranalyzer.security.cs.ruleNamespace=SonarAnalyzer.Security, sonar.plugins.downloadOnlyRequired=true, sonar.azureresourcemanager.file.suffixes=.bicep, sonar.javascript.file.suffixes=.js,.jsx,.cjs,.mjs,.vue, sonar.cpd.abap.minimumLines=20, sonar.cobol.tab.width=8, sonar.allowPermissionManagementForProjectAdmins=true, sonaranalyzer-vbnet.staticResourceName=SonarAnalyzer-10.3.0.106239.zip, sonar.text.inclusions.activate=true, sonar.dependencyCheck.securityHotspot=true, sonar.vbnet.analyzeGeneratedCode=false, sonar.pli.file.suffixes=.pli, sonar.java.file.suffixes=.java,.jav, sonar.kotlin.file.suffixes=.kt,.kts, sonar.plugins.risk.consent=ACCEPTED, sonar.php.file.suffixes=php,php3,php4,php5,phtml,inc, sonar.auth.gitlab.url=https://gitlab.com, sonar.scanner.skipNodeProvisioning=false, sonar.xml.file.suffixes=.xml,.xsd,.xsl,.config, sonar.dbcleaner.weeksBeforeDeletingAllSnapshots=260, sonar.portfolios.confidential.header=true, sonaranalyzer-vbnet.pluginKey=vbnetenterprise, sonar.azureresourcemanager.activate=true, sonar.java.jvmframeworkconfig.activate=true, sonar.dependencyCheck.severity.low=0.0, sonar.updatecenter.url=https://downloads.sonarsource.com/sonarqube/update/update-center.properties, sonar.tsql.file.suffixes=.tsql, sonar.core.startTime=2025-01-25T18:33:10+0100}
activeRules: [22 kubernetes, 251 python, 30 scala, 11 pythonbugs, 121 secrets, 40 docker, 132 plsql, 30 ruby, 49 Web, 23 xml, 178 php, 49 terraform, 26 cloudformation, 62 swift]
inputFiles: [
file:///Users/colinmueller/Source/sonar-scanning-examples/sonar-scanner/src/html/sample.xhtml (UTF-8)
]
]
[2025-01-27T10:54:40.15] [sonarlint-analysis-engine] INFO sonarlint - Index files
[2025-01-27T10:54:40.15] [Report about progress of file indexation] INFO sonarlint - 1 file indexed
[2025-01-27T10:54:40.18] [Progress of the Docker analysis] INFO sonarlint - 0 source files to be analyzed
[2025-01-27T10:54:40.18] [Progress of the Docker analysis] INFO sonarlint - 0/0 source files have been analyzed
[2025-01-27T10:54:40.181] [sonarlint-analysis-engine] INFO sonarlint - Available processors: 8
[2025-01-27T10:54:40.181] [sonarlint-analysis-engine] INFO sonarlint - Using 8 threads for analysis.
[2025-01-27T10:54:40.2] [sonarlint-analysis-engine] INFO sonarlint - Analyzing all except non binary files
[2025-01-27T10:54:40.201] [Progress of the text and secrets analysis] INFO sonarlint - 1 source file to be analyzed
[2025-01-27T10:54:40.207] [Progress of the text and secrets analysis] INFO sonarlint - 1/1 source file has been analyzed
[2025-01-27T10:54:40.207] [sonarlint-analysis-engine] INFO sonarlint - Analysis detected 5 issues and 0 Security Hotspots in 120ms
That’s why I was asking about a specific file/project where the issue can be reproduced, rather than examples of issues. It doesn’t have to be your original project, but at least a small project where you face the same issue in your environment.
