Allow a new branch to become the Main branch - SonarQube Server | Product Roadmap

SonarQube Server

Under Consideration

Released in 9.9 (prev. LTA)

Released in 2025 Rel. 1 LTA

Released after 2025 Rel. 1

Project branches & Pull Requests

Simplified PR summary and decoration

PRs show issues that will be fixed by the merge

Modern User Interface

Allow a new branch to become the Main branch

Issues

Clean Code Taxonomy

Clean Code to the core: Issue and rule pages adopt the Clean Code Taxonomy

Third-party issues are dismissible in SonarQube

Updated Issue Lifecycle

Provide AI-based fix suggestions for Sonar issues

Quality Profiles & Quality Gates

Clean as You Code criterion to keep the new code clean

Quality Profile pages adopt the Clean Code Taxonomy

Deactivate rules in an 'extended' Quality Profile

Recommend a quality gate for projects with AI-generated code

SonarLint

Mute individual issues on the fly in your IDE

Activate SonarQube for IDE connected mode from SonarQube Server or SonarQube Cloud web interface

Investigate and fix SonarQube Server issues in IDE

Identity & access management

Users and tokens deprovisioning with Azure/SCIM

SonarQube can provision and synchronize users and groups from GitHub

SonarQube can provision and synchronize permissions from GitHub

Project permissions synchronized from GitHub can be customized

User and group management can be fully delegated to GitLab

Synchronize project permissions on SonarQube with GitLab

Password complexity for local accounts

Operability

Faster access to the projects after the upgrade

Autoscaling for SonarQube cluster in Kubernetes

SonarQube runs in a FIPS-enforced environment

Modern SMTP authentication (OAuth)

Support OpenShift

Integration

Security analysis is available in GitLab

Support C and C++ analysis in the official GitHub Action

Simplified Monorepo configuration

Bulk import GitLab projects

Reporting

SonarLint adoption metrics

Usage of the customizable severity

Support "CWE Top 25 2022"

Support "CWE Top 25 2023"

Sonar helps to assess issues related to CASA security requirements

Sonar helps to assess issues related to DoD STIG DISA requirements

Admin users can disable the "Confidential" header in Portfolio PDF Reports

Code analysis: User experience

Analyze multiple code variants built on the same host

Natively import Cobertura coverage files for C and C++ projects

Make the Build-Wrapper or an alternative to it available on MacOS Apple Silicon

Reduce the number of Scanner for .NET versions

C++ AutoConfig for SonarQube

Support C/C++/Objective-C analysis on Linux ARM64 (a.k.a. aarch64)

No Java dependency for SonarScanner for .NET

Scanners Download Only Required Analyzers

Download only required analyzers

Improved multi-language support for .Net scanner

Code analysis: Capabilities

.NET Logging Rules

Support Standalone JavaScript projects in .NET solutions

Java analyzer supports "jakarta" namespace (formerly javax)

Find issues in inline JavaScript code inside your HTML files

More rules to check for commonly found security misconfiguration in Dockerfiles

Load Hadolint Reports

Load "TFLint" Reports

Rules to detect 50+ app secrets/tokens

Rules to detect 100+ app secrets/tokens

Find Custom Secrets

Detect security misconfigurations on ARM templates

Detect security misconfigurations on Bicep files

Detect security misconfigurations in Helm files

Write Clean Code with Python Date and Time libraries

Support Ruff external analyzer reports

Gradle Kotlin DSL Support

Support Kotlin Multiplatform projects

Import Valgrind Memcheck issues

Analyze Python code in Jupyter Notebooks

Avoid common pitfalls in ASP.NET WebAPI

Analyze code featuring C++20 modules

Code analysis: Framework support

Support of Maven 4

FastAPI support in security analysis

Avoid common pitfalls in MVC controllers

Rules for Blazor

Going further with Spring Boot support

Spring Framework 5 advanced support

TensorFlow library support in Python analysis

Numpy library support in Python analysis

Pandas library support in Python analysis

Scikit-Learn library support in Python analysis

PyTorch library support in Python analysis

Detect security misconfigurations in Ansible files

Support Ansible Playbooks

Code analysis: Language version support

Support for .NET 8 and C#12

You are now able to analyze .NET8 / C#12 code and we now find issues in the new C#12 syntax.

Support C++23 code

Support Python 3.12

Support Java 21

Dart/Flutter support

Support for .NET 9

Allow a new branch to become the Main branch

125

AG

Alexandre Gigleux

Posted on July 2021

Project administrators will be able to choose any project branch as the main branch in SonarQube.

If your project is created from GitHub, AzureDevOps, Bitbucket or GitLab, the main branch in SonarQube should correspond to the default branch defined in the DevOps platform. But you may not import your project from these platforms. You'll then be able to select a branch as Main.

What's new

CL

Chris Levis

September 2023

We are pleased to announce that this feature is now available in SonarQube 10.2. To start using this feature, follow these instructions to upgrade your SonarQube version.

To learn more about what the release has to offer, check out this announcement.

Questions or feedback? Leave us a note in our community forum.