Topics tagged security

Topic	Replies	Views	Activity
Security event logging SonarQube Server / Community Build sonarqube , security , logging	1	281	December 7, 2023
What is Worst Case Scenario for sonar.login token leak? SonarQube Server / Community Build security , tokens	1	306	December 4, 2023
Governance and Security Access SonarQube Cloud security , reports , sonarqube-cloud	1	434	November 27, 2023
Sonar can detect 110 secret patterns across 60 cloud providers Sonar Updates security , secrets	2	1177	November 8, 2023
Spring Controller @AuthenticationPrincipal object treated as tainted for "user-controlled" info Report False-positive / False-negative... java , security , spring	9	2856	October 31, 2023
Does SonarQube scan CocoaPods imported in a Swift iOS App codebase? Product Manager for a Day swift , security	6	689	October 26, 2023
Use stronger SSL and TLS versions Report False-positive / False-negative... cfamily , security	4	1925	October 19, 2023
"Database passwords should not be disclosed" not always detecting SonarQube Cloud database , security , secrets , appsec	4	1801	October 19, 2023
Security analyzer: java.lang.OutOfMemoryError: Java heap space using Microsoft hosted agents after SonarQube Cloud csharp , security , sonarqube-cloud	1	277	October 16, 2023
CVE-2023-4911 vulnerability in Sonar image SonarQube Server / Community Build security	2	1081	October 11, 2023
[Tech Story] Takeaways from building a SAST product, and why OWASP benchmark is not enough Sonar Updates security	6	6137	October 2, 2023
[javasecurity:S6096] Zip slip reported when prevented using Java NIO Report False-positive / False-negative... java , sonarqube , security	3	964	September 14, 2023
[javasecurity:S6096] Zip slip not reported when unzip is done using Java NIO Report False-positive / False-negative... java , sonarqube , security	3	638	September 14, 2023
Weak SSL and TLS versions used in C sources Report False-positive / False-negative... cfamily , security , sonarqube-cloud	3	532	September 13, 2023
How OWASP and SANS are updated? SonarQube Server / Community Build sonarqube , security	3	291	September 13, 2023
SonarCloud Additional Due Diligence SonarQube Cloud security	5	381	September 13, 2023
Sonar can detect 67 secret patterns across 29 cloud providers Sonar Updates security , secrets	0	1246	August 30, 2023
Trying to use SonarQube to detect XSS vulnerabilities in JS SonarQube Server / Community Build javascript , security , xss	4	3236	August 21, 2023
Change this code to not construct the URL from user-controlled data - followup SonarQube Server / Community Build dotnet , security , appsec	6	3188	August 17, 2023
Django Secret Key from .env-file raising secrets:S6652 SonarQube Cloud security , python , sonarqube-cloud	3	1084	August 25, 2023
Does SonarLint store any information about code it analyze? IntelliJ Platform security , gdpr	1	431	August 7, 2023
Java SonarQube: Error This use of java/io/PrintWriter.write(Ljava/lang/String;)V could be vulnerable SonarQube Server / Community Build java , security , spring , xss	1	837	August 7, 2023
Feature request: ingest BOM report from Cyclonedx Product Manager for a Day sonarqube , security	6	3779	August 3, 2023
Meet us at BlackHat USA 2023! Sonar Updates security , events	0	701	July 20, 2023
javasecurity:S5145 unclear example compliant solution Report False-positive / False-negative... java , security	9	1240	July 19, 2023
Project admin permission for a group of projects Product Manager for a Day permissions , security	10	1445	July 7, 2023
Sonar Scanner CLI freezing at various stages SonarQube Server / Community Build javascript , sonarqube , scanner , security	6	1267	June 30, 2023
XSS Related Typescript/Javascript Rules miss out vulnerable cases SonarQube Server / Community Build typescript , security	2	980	June 27, 2023
Non-marketplace plugin security SonarQube Server / Community Build security , plugin	4	468	June 21, 2023
C Vulnerability Rules SonarQube Server / Community Build cfamily , security	1	392	June 16, 2023