Support for Ansible is now available with SonarQube Cloud (all plans).

Offering 17 rules that allow you to scan your YAML-based Ansible files, covering security issues in Ansible itself, Docker, and Kubernetes deployments, as well as maintainability issues.

You can view our list of rules here. 

See the Community Post for more details.

Support for Dart is now available with SonarQube Cloud Team and Enterprise plans, as well as Open Source projects.

You can view our expanding list of rules here. To learn more about the approach we have taken check out this blog. 

See the Community Post for more details.

We have added DISA Application Security and Development (ASD) STIG and Cloud Application Security Assessment (CASA) security reports to the SonarQube Cloud Enterprise plan.

See also the Community announcement for further details.

SonarQube Cloud now supports multi-language analysis via the SonarScanner for .NET.

Now, a single scan can analyze your entire repository.

Plus, for JS and TS files the scanner auto-detects test files, meaning you can now analyze a typical .NET backend + JS/TS frontend application with a single scan.

See also the Community announcement for details of languages supported and set up guide.

SonarQube Cloud can now detect even more secret patterns.

Learn more here.

We just launched two new plans on SonarQube Cloud that will replace our existing offering.

The Enterprise plan delivers a range of advanced features offering mission-critical flexibility, scalability, and performance. Available now as an early access program with the following key features:

• SSO through SAML
• Enterprise hierarchy to group multiple organizations
• Management reporting through Portfolios, security reports, and project reports
• Organization-wide project configuration

The Team plan replaces the current paid plan. The Team plan delivers essential capabilities for small development teams and businesses, both from an ecosystem integration and collaboration perspective. Some features of the current paid plan have moved to the Enterprise plan and will not be available with the Team plan:

• Enterprise-specific languages (ABAP, COBOL, RPG, PL/I, Apex)
• GitHub Advanced security integration
• Organization-level project management
• Quality Profile permission delegation

Please visit this blog or Community post for more information. You can also read the new plans FAQ.