Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Detect hotspots locally in the IDE for C, C++, JavaScript and TypeScript #4588

Closed
duncanp-sonar opened this issue Jul 24, 2023 · 0 comments
Closed

Comments

@duncanp-sonar
Copy link
Contributor

Description

See MMF-3553 Report Security Hotspots directly in Visual Studio for SQ users

  • When the user is in Connected Mode, hotspot analysis rules will be run when files are opened or saved.
  • Local hotspot issues will be displayed in a new tool window.
  • Issues that can be matched to hotspots that have been marked as safe on the Sonar server will not be displayed in the IDE.
  • Rule help will be available by clicking on the rule id hyperlink in the list of issues in the new tool window.
  • Squigglies will be displayed in the editor for hotspots in the same way as for "normal" issues (note: this is a variation from the desired behaviour described in the MMF. Only showing squigglies for local hotspots when the new tool window is visible was cut - out of time).

Out of scope

C# and VB.NET will not be included (we would need a completely separate implementation for Roslyn rules as we don't control the execution of Roslyn rules and can't easily stop issues from appearing in the Error List)

@duncanp-sonar duncanp-sonar added this to the 7.1 milestone Jul 24, 2023
@duncanp-sonar duncanp-sonar added this to To do in Run Hotspots in local via automation Jul 24, 2023
@duncanp-sonar duncanp-sonar moved this from To do to Review in progress in Run Hotspots in local Jul 24, 2023
Run Hotspots in local automation moved this from Review in progress to Done Jul 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
No open projects
Development

No branches or pull requests

1 participant