Sonar-tools

Latest version: v3.9

Safety actively analyzes 723177 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 11

3.4

What's Changed

- `sonar-tools` is now also shipped as a docker image. See https://github.com/okorach/sonar-tools?tab=readme-ov-file#docker on how to use `sonar-tools` in docker
- `sonar-config` can now export configuration in YAML format. Import of YAML format is not yet supported
- `sonar-config` can now import configuration in SonarCloud (experimental alpha version)
- Several fixes

Details
* Bump version to 3.4 by okorach in https://github.com/okorach/sonar-tools/pull/1261
* Add docker image by okorach in https://github.com/okorach/sonar-tools/pull/1263
* Handle file write access denied by okorach in https://github.com/okorach/sonar-tools/pull/1269
* Add SonarQube URL in sonar-config export by okorach in https://github.com/okorach/sonar-tools/pull/1270
* Check inputs files and raise clean errors when can't read by okorach in https://github.com/okorach/sonar-tools/pull/1272
* Remove calls to deprecated user and group APIs by okorach in https://github.com/okorach/sonar-tools/pull/1274
* Simplify output format selection by okorach in https://github.com/okorach/sonar-tools/pull/1276
* More consistent projects export/import CLI by okorach in https://github.com/okorach/sonar-tools/pull/1278
* Allows JSON and CSV export formats by okorach in https://github.com/okorach/sonar-tools/pull/1279
* Fixes by okorach in https://github.com/okorach/sonar-tools/pull/1280
* Gracefully handle HTTP errors in threads by okorach in https://github.com/okorach/sonar-tools/pull/1281
* YAML sonar-config export beta by okorach in https://github.com/okorach/sonar-tools/pull/1282
* Improve YAML output by okorach in https://github.com/okorach/sonar-tools/pull/1289
* Config import sonarcloud alpha by okorach in https://github.com/okorach/sonar-tools/pull/1291
* Fix 1286 by okorach in https://github.com/okorach/sonar-tools/pull/1293
* Fixes 1287 by okorach in https://github.com/okorach/sonar-tools/pull/1294
* Fix 1288 by okorach in https://github.com/okorach/sonar-tools/pull/1295
* Fixes 1301 by okorach in https://github.com/okorach/sonar-tools/pull/1302
* Fixes 1303 by okorach in https://github.com/okorach/sonar-tools/pull/1319
* Exclude migration tool from coverage & duplication by okorach in https://github.com/okorach/sonar-tools/pull/1321
* Add-basic-sonar-migration-test by okorach in https://github.com/okorach/sonar-tools/pull/1322


**Full Changelog**: https://github.com/okorach/sonar-tools/compare/3.3...3.4

3.3

- `sonar-config`: Improved / Hardened several elements for both import and export
- Fixed portfolios import/export
- Fixed permissions import (for projects, applications and portfolios)
- Better compatibility with SonarCloud
- Other misc bug fixes
- `sonar-audit`: Added verification that projects are analyzed with the right scanner (Maven, Gradle, .Net). This verification is not 100% reliable

What's Changed
* Fixes findings and measures export by okorach in https://github.com/okorach/sonar-tools/pull/1200
* Fixes for release 3.2.1 by okorach in https://github.com/okorach/sonar-tools/pull/1201
* Compatibility CE and CE 10.x and 9.9 by okorach in https://github.com/okorach/sonar-tools/pull/1207
* Compatibility with CE and DE both for LTS/LTA and LATEST by okorach in https://github.com/okorach/sonar-tools/pull/1208
* bump version by okorach in https://github.com/okorach/sonar-tools/pull/1209
* Update what's new by okorach in https://github.com/okorach/sonar-tools/pull/1211
* Detect usage of incorrect scanner by okorach in https://github.com/okorach/sonar-tools/pull/1212
* Custom types for better type hints by okorach in https://github.com/okorach/sonar-tools/pull/1214
* Add KeyList type by okorach in https://github.com/okorach/sonar-tools/pull/1215
* Audit 3rd party plugins by okorach in https://github.com/okorach/sonar-tools/pull/1216
* Refactoring search-object by okorach in https://github.com/okorach/sonar-tools/pull/1219
* Refactoring-audit-problem by okorach in https://github.com/okorach/sonar-tools/pull/1220
* Hardening sonar-config import by okorach in https://github.com/okorach/sonar-tools/pull/1224
* Fix-sonar-config-import by okorach in https://github.com/okorach/sonar-tools/pull/1229
* sonar-config fixes by okorach in https://github.com/okorach/sonar-tools/pull/1231
* Fix-lamguage-existence by okorach in https://github.com/okorach/sonar-tools/pull/1232
* Further-sonar-config-hardening by okorach in https://github.com/okorach/sonar-tools/pull/1234
* Further sonar config hardening by okorach in https://github.com/okorach/sonar-tools/pull/1235
* GL URL format by okorach in https://github.com/okorach/sonar-tools/pull/1236
* Fix import portfolios by okorach in https://github.com/okorach/sonar-tools/pull/1239
* Portfolios-export-import fix export by okorach in https://github.com/okorach/sonar-tools/pull/1242
* Improve portfolio export by okorach in https://github.com/okorach/sonar-tools/pull/1243
* Cast the timeout parameter to int by toliger in https://github.com/okorach/sonar-tools/pull/1246
* Improve portfolio import by okorach in https://github.com/okorach/sonar-tools/pull/1245
* Streamline-portfolios-json by okorach in https://github.com/okorach/sonar-tools/pull/1247
* Fix 1248 by okorach in https://github.com/okorach/sonar-tools/pull/1249
* Add-applications-in-portfolios-export by okorach in https://github.com/okorach/sonar-tools/pull/1252
* Add-applications-in-portfolio-import by okorach in https://github.com/okorach/sonar-tools/pull/1253
* Fix devops export by okorach in https://github.com/okorach/sonar-tools/pull/1255
* Fix sonarcloud project config settings export by okorach in https://github.com/okorach/sonar-tools/pull/1256
* Fix usage with SonarCloud by okorach in https://github.com/okorach/sonar-tools/pull/1259

New Contributors
* toliger made their first contribution in https://github.com/okorach/sonar-tools/pull/1246

**Full Changelog**: https://github.com/okorach/sonar-tools/compare/3.2...3.3

3.2.1

- Patch release to fix all compatibility problems with
- Lower editions: All editions (Community, Developer, Enterprise) have been tested
- 9.9 LTS/LTA version: All editions (Community, Developer, Enterprise) in version 9.9 have been tested

What's Changed
* Fixes findings and measures export by okorach in https://github.com/okorach/sonar-tools/pull/1200
* Fixes for release 3.2.1 by okorach in https://github.com/okorach/sonar-tools/pull/1201
* Compatibility CE and CE 10.x and 9.9 by okorach in https://github.com/okorach/sonar-tools/pull/1207
* Update what's new by okorach in https://github.com/okorach/sonar-tools/pull/1211


**Full Changelog**: https://github.com/okorach/sonar-tools/compare/3.2...3.2.1

3.2

What's new

* Refactoring on portfolios for hardening
* **sonar-findings-export** and **sonar-rules** now have a `--languages` option to filter findings/rules in a restrained list of languages
* **sonar-measures-export** can export measures for Applications and Portfolios. For this reason, a new column (col 2) has been added to the CSV output format which can be `PROJECT`, `BRANCH`, `APPLICATION`, `APPLICATIONBRANCH` or `PORTFOLIO`
* **sonar-findings-export**:
- Ability export findings for Applications and Portfolios, Application and Project branches
- Fixes in SARIF export format
- Adjustments to new issues taxonomy
- Added option to not export all Sonar findings custom properties in SARIF export for more compact output
- Added finding author and language column in CSV export, in JSON and SARIF too
- Updated SARIF format export to not export custom properties when already standard SARIF fields
- Have a new field language for the issue language
* **sonar-config**:
- Smart handling of properties that can be lists. If the list contains a comma, the property is exported as list, if no comma, as a more
compact comma separated string
- Settings that are the default are no longer exported unless `--exportDefaults` option is provided
- Changed the key for default branch from `__default__` to `-DEFAULT_BRANCH-` to make sure that this cannot conflict with a real branch name (because git forbids branches starting by `-`)
Portfolio export format has been slightly changed for consistency

Details

* SARIF export fixes by okorach in https://github.com/okorach/sonar-tools/pull/1148
* Add SARIF tests by okorach in https://github.com/okorach/sonar-tools/pull/1149
* Add filters for rules and findings export by okorach in https://github.com/okorach/sonar-tools/pull/1154
* Quality-pass-2 by okorach in https://github.com/okorach/sonar-tools/pull/1157
* Fix tests by okorach in https://github.com/okorach/sonar-tools/pull/1158
* Fix issue export with multiple filters by okorach in https://github.com/okorach/sonar-tools/pull/1159
* Improve sonar-config export by okorach in https://github.com/okorach/sonar-tools/pull/1164
* Fix regression by okorach in https://github.com/okorach/sonar-tools/pull/1165
* Remove issues deprecated apis by okorach in https://github.com/okorach/sonar-tools/pull/1166
* Make most CLI options as configurable params by okorach in https://github.com/okorach/sonar-tools/pull/1167
* Use CSV write to produce CSV by okorach in https://github.com/okorach/sonar-tools/pull/1168
* Configurable options everywhere by okorach in https://github.com/okorach/sonar-tools/pull/1170
* Fix double del TOKEN by okorach in https://github.com/okorach/sonar-tools/pull/1171
* Add portfolios and apps components by okorach in https://github.com/okorach/sonar-tools/pull/1172
* Branch for apps by okorach in https://github.com/okorach/sonar-tools/pull/1174
* Fix SARIF regression by okorach in https://github.com/okorach/sonar-tools/pull/1176
* Branch deletion fix by okorach in https://github.com/okorach/sonar-tools/pull/1177
* Fix unicity for apps and SIF not readable test by okorach in https://github.com/okorach/sonar-tools/pull/1178
* Fixes 1175 by okorach in https://github.com/okorach/sonar-tools/pull/1180
* Fix 1169 by okorach in https://github.com/okorach/sonar-tools/pull/1181
* Findings search on branches and PRs by okorach in https://github.com/okorach/sonar-tools/pull/1182
* LoC for apps by okorach in https://github.com/okorach/sonar-tools/pull/1183
* Issues for apps by okorach in https://github.com/okorach/sonar-tools/pull/1184
* Unique-cross-platform-object-ids by okorach in https://github.com/okorach/sonar-tools/pull/1185
* Reduce tech debt by okorach in https://github.com/okorach/sonar-tools/pull/1188
* Fix 1186 and 1187 plus final JSON, SARIF output format clean up by okorach in https://github.com/okorach/sonar-tools/pull/1189
* Adjust tests for 9.9 by okorach in https://github.com/okorach/sonar-tools/pull/1191
* Adjust-tests-for-sonarcloud by okorach in https://github.com/okorach/sonar-tools/pull/1192
* Fixes 1193 by okorach in https://github.com/okorach/sonar-tools/pull/1194

**Full Changelog**: https://github.com/okorach/sonar-tools/compare/3.1...3.2

3.1

https://github.com/okorach/sonar-tools/milestone/32?closed=1

Detailed changes
* Align-it-with-sonar-scripts by okorach in https://github.com/okorach/sonar-tools/pull/1070
* audit logs for errors or warnings by okorach in https://github.com/okorach/sonar-tools/pull/1074
* Display error when asking for non existing metric by okorach in https://github.com/okorach/sonar-tools/pull/1075
* skip export for projects with no access by okorach in https://github.com/okorach/sonar-tools/pull/1076
* Export measures history as table by okorach in https://github.com/okorach/sonar-tools/pull/1079
* Fix cache? by okorach in https://github.com/okorach/sonar-tools/pull/1080
* Add tests by okorach in https://github.com/okorach/sonar-tools/pull/1081
* Fix sonar-audit hang when no permission on project by okorach in https://github.com/okorach/sonar-tools/pull/1083
* Add-more-tests by okorach in https://github.com/okorach/sonar-tools/pull/1084
* Create SECURITY.md by okorach in https://github.com/okorach/sonar-tools/pull/1086
* Add test for measures history by branch by okorach in https://github.com/okorach/sonar-tools/pull/1094
* Add rules test by okorach in https://github.com/okorach/sonar-tools/pull/1095
* Fix 1096 by okorach in https://github.com/okorach/sonar-tools/pull/1097
* Fixes 1098 by okorach in https://github.com/okorach/sonar-tools/pull/1100
* Configurable Logging by okorach in https://github.com/okorach/sonar-tools/pull/1101
* sonar-loc for branches by okorach in https://github.com/okorach/sonar-tools/pull/1102
* Fix audit and config problems with sonarqube 10x by okorach in https://github.com/okorach/sonar-tools/pull/1106
* Add-loc-test-on-branches-and-portfolios by okorach in https://github.com/okorach/sonar-tools/pull/1107
* Add SIF tests by okorach in https://github.com/okorach/sonar-tools/pull/1108
* Add accept issues transition by okorach in https://github.com/okorach/sonar-tools/pull/1112
* Fix 1111 by okorach in https://github.com/okorach/sonar-tools/pull/1113
* Fix-1110 by okorach in https://github.com/okorach/sonar-tools/pull/1114
* Fix extra / by waynekhan in https://github.com/okorach/sonar-tools/pull/1109
* Improve tests and test coverage by okorach in https://github.com/okorach/sonar-tools/pull/1116
* Issues-sync performance improvement by okorach in https://github.com/okorach/sonar-tools/pull/1120
* issue sync fixes (check exact match before approx match) by okorach in https://github.com/okorach/sonar-tools/pull/1121
* Fix-1122 by okorach in https://github.com/okorach/sonar-tools/pull/1125
* Refactoring by okorach in https://github.com/okorach/sonar-tools/pull/1126

New Contributors
* waynekhan made their first contribution in https://github.com/okorach/sonar-tools/pull/1109

**Full Changelog**: https://github.com/okorach/sonar-tools/compare/3.0...3.1

3.0

What's Changed
* Most Sonar Tools are now compatible with SonarCloud
* sonar-measures-export can now export measures history instead of only the last value of a measure
* Several bug fixes
* Migrate wording from LTS to LTA by okorach in https://github.com/okorach/sonar-tools/pull/1050

**Full Changelog**: https://github.com/okorach/sonar-tools/compare/2.11...3.0

Page 2 of 11

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.