SonarQube on Software Factory

Sandboxing Issue Triage

Mon, 01 Jan 0001 00:00:00 +0000

This page explains the Issue Sandboxing behavior you will see after the upgrade. This page is designed to help you prepare for the upgrade.

SonarQube 2026.1 LTA — What new to expect

We are upgrading from SonarQube 2025.1 LTA → 2026.1 LTA.

TL;DR

A major LTA-to-LTA upgrade brings a significant number of new and improved rules across all languages.

New issues can appear on code you haven’t touched — either because the analyzers got smarter or because new rules were added to the quality profile.

Secrets, Tokens and Credentials in SonarQube

Mon, 01 Jan 0001 00:00:00 +0000

This document lists all secrets, tokens and credentials that can be configured and managed by a non-administrator user in SonarQube.

For each item, a concise explanation of its usage and a link to the official documentation are provided.

Type	Description	Details
User Token	Full user-level authentication token, inherits all user permissions	User Token
Project Analysis Token	Scoped token for running analyses on a single project	Project Analysis Token
Global Analysis Token	Token for running analyses on all projects in the instance	Global Analysis Token
Webhook Secret	HMAC-SHA256 secret to verify authenticity of webhook payloads	Webhook Secret
Project Badge Token	Auto-generated token for displaying project metrics badges	Project Badge Token
DevOps Platform PAT	GitLab PAT for project import and Merge Request decoration	DevOps Platform Integration
Login/Password (deprecated)	Legacy authentication method, replaced by tokens	Login/Password

User Token

Description

Authentication token that allows a user to perform all actions the user can do via the web interface, without using their actual credentials (login/password).

What's new

Mon, 01 Jan 0001 00:00:00 +0000

SonarQube has released a new version with exciting features and improvements.

We will discuss some of the key highlights that are activated and available within the Software Factory.

Features to look for in SonarQube Server 2025.1 LTA

For this new major SonarQube Server version the following new features will be available:

Project Administration

Guided configuration of all projects in a monorepo
Flexible main branch designation
Guidance on project onboarding related to new code configuration .

Analyzers, Scanners

Faster analysis bootstrap
Faster scan times
Improved experience for C and C++ analysis
Maven scanner scans all files
New C, C++, and Objective-C GitHub Action

Quality Gates and Quality Profiles

Set rule priority to uphold your coding standards
Updated Sonar Way quality gate condition
Exclude rule from inherited quality profile
Dual operating modes with Standard Experience Mode that preserves familiar rule and issue qualities and severities for users or Multi Quality Rule (MQR) Mode to more accurately represent the impact an issue has on all software qualities

Issues on previous version as 9.9.x

Issue: Refers to a problem or defect detected in the source code that does not comply with a rule. It can potentially impact the quality and maintainability of the software. Here are the 5 common types of issues in SonarQube: