TSLint and ESLint friendly
TypeScript developers can now upload their TSLint and ESLint reports, and track them next to issues detected by SonarQube’s TypeScript analyzer.
Analysis of Go code
Go is now supported by SonarQube, providing 40+ rules, cognitive complexity, duplication detection and so much more. It’s open-source, and it’s available to all the Go developers out there !
Welcome External Analyzers !
SonarQube 7.2 introduces a generic way to import issues found by 3rd-party analyzers.No need to jump from one tool to another, just benefit from a consolidated view in SonarQube. Even better: SonarQube has built-in support for some of the standard analyzers out there.
Keep on using other Go analyzers
On top of enjoying the new built-in Go analyzer, you can also keep on importing any govet, golint and gometalinter issue you’ve been tracking.
An open framework to build upon
Security Analysis DE Available on Developer Edition EE Available on Enterprise Edition DCE Available on Data Center Edition
SonarQube 7.2 marks a great milestone in the detection of security vulnerabilities. The most famous CWE patterns of OWASP Top 10 can run scared, as SonarQube can now continuously analyze your code against the following rules (in Java and C#):SQL query injection
Detect SQL injection vulnerabilities
Learn moreOS command injection
Detect OS command injection vulnerabilities
Learn moreXPath expressions injection
Detect XPath injection vulnerabilities
Learn moreLDAP query injection
Detect LDAP injection vulnerabilities
Learn moreI/O function calls injection
Detect I/O function calls injection vulnerabilities
Learn moreRegular expressions injection
Detect regular expressions injection vulnerabilities
Learn more
Analysis of Pull Requests DE Available on Developer Edition EE Available on Enterprise Edition DCE Available on Data Center Edition
Check the quality of your Pull Requests directly in SonarQube (just like branches), and also benefit from inline comments for GitHub and TFS. Only clean code will make it to the main branch!Github Enterprise
Microsoft TFS
User Experience, Continuously Improved
SonarQube 7.2 continues to raise the bar in terms of user experience, so that you can focus on the essential: code quality.Embedded Documentation
All important concepts and explanations are now available directly in the SonarQube UI.
Clean Portfolio Hierarchy EE Available on Enterprise Edition DCE Available on Data Center Edition
The Portfolios page now focuses on the few global portfolios you’ve defined and makes it easy for you to explore them more in detail.
New Packaging
Commercial packages are now distributed individually, so you directly get the features and functionality that match your needs.
