How to SupressWarnings for Sonar Security Hotspots?

How to SupressWarnings for Sonar Security Hotspots?

Sonarlint/SonarQube allows you to use comments for disabling analysis in specific lines. In order to do this, you can just add a comment with the text NOSONAR in the same line:

Random rand=new Random();//NOSONAR not used in secure contexts

Aside from this, you can mark Security Hotspots as resolved in the web Dashboard of SonarQube. In order to do this, you need to navigate to the Security Hotspot and mark it as not an issue. You might even want to disable that specific type of Security Hotspot entirely if it is generally not applicable for your project.

 

作者:Chuck Lu    GitHub    
posted @   ChuckLu  阅读(32)  评论(0编辑  收藏  举报
相关博文:
阅读排行:
· 全程不用写代码,我用AI程序员写了一个飞机大战
· DeepSeek 开源周回顾「GitHub 热点速览」
· MongoDB 8.0这个新功能碉堡了,比商业数据库还牛
· 记一次.NET内存居高不下排查解决与启示
· 白话解读 Dapr 1.15:你的「微服务管家」又秀新绝活了
历史上的今天:
2022-09-19 How To Bind a Combobox to a Dictionary in WPF C#
2022-09-19 WPF DataBinding: Nullable Int still gets a validation error?
2019-09-19 .prop() vs .attr()
2019-09-19 what should I use .post vs .ajax?
2019-09-19 Path.Combine Method
2017-09-19 numeric and int in sql server
点击右上角即可分享
微信分享提示