What’s new

SonarQube Cloud now offers access to an organization-level cross-project issues list.

This feature, available with the Enterprise plan, delivers a comprehensive view of issues across multiple projects, enabling you to direct focus to the key issues org-wide.

To discover more, including how to access this feature, check out this Community announcement.

We are excited to announce the launch of our new free tier for SonarQube Cloud, replacing our previous free offering.

This new tier is designed to provide even more value to small teams and developers and to make it easier to explore Sonar’s capabilities before moving to a commercial plan.

Key features of the new free tier:

• Private repository scanning: Scan private repositories with up to 50k lines of code

• Comprehensive analysis: Get pull request and main branch analysis

• Broad language support: Supports 30 languages and frameworks

• Team collaboration: Allows up to 5 users

• Public repository scanning: Free scanning for all public repositories, regardless of size

• Easy sign-up: No credit card is required to sign up

To upgrade your existing free offering to the new free tier, visit the Billing & Upgrade page, and select Modify plan.

For more details on the benefits and how to get started, check out our blog post.

SonarQube Cloud users can take advantage of a new release of the .NET analyzer with:

• Support for .NET 9
• New UX for Null Reference advanced issues
• New secrets detection rule
• New advanced rules

See this community post for more details.

Support for Ansible is now available with SonarQube Cloud (all plans).

Offering 17 rules that allow you to scan your YAML-based Ansible files, covering security issues in Ansible itself, Docker, and Kubernetes deployments, as well as maintainability issues.

You can view our list of rules here. 

See the Community Post for more details.

Support for Dart is now available with SonarQube Cloud Team and Enterprise plans, as well as Open Source projects.

You can view our expanding list of rules here. To learn more about the approach we have taken check out this blog. 

See the Community Post for more details.

We have added DISA Application Security and Development (ASD) STIG and Cloud Application Security Assessment (CASA) security reports to the SonarQube Cloud Enterprise plan.

See also the Community announcement for further details.