Sonar-tools

Latest version: v3.8

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 11

2.7

This release does not add any functionality. It mainly:
- Allows for SonarQube 10 compatibility for which some APIs have changed
- Supports (does not fail during) audit of projects analyzed with "recent" versions of scanner (scanner released since early 2022).

What's Changed
* Fix sonar.projectVersion by okorach in https://github.com/okorach/sonar-tools/pull/864
* docs(README.md): Fix sonar-housekeeper example by versat in https://github.com/okorach/sonar-tools/pull/867
* Fixes Builds uses deprecated NodeJS 12 by okorach in https://github.com/okorach/sonar-tools/pull/869
* Support recent scanner versions by okorach in https://github.com/okorach/sonar-tools/pull/876
* Fix housekeeper by okorach in https://github.com/okorach/sonar-tools/pull/877
* Bump (c) year by okorach in https://github.com/okorach/sonar-tools/pull/878
* Compatibility SonarQube 10 by okorach in https://github.com/okorach/sonar-tools/pull/886

New Contributors
* versat made their first contribution in https://github.com/okorach/sonar-tools/pull/867

**Full Changelog**: https://github.com/okorach/sonar-tools/compare/v2.6...v2.7

2.6

**Full Changelog**:
- https://github.com/okorach/sonar-tools/compare/v2.5...v2.6
- https://github.com/okorach/sonar-tools/milestone/22?closed=1

2.5

What's Changed
* Handle 3rd party scanners by okorach in https://github.com/okorach/sonar-tools/pull/856
* Hardening-v2.5 by okorach in https://github.com/okorach/sonar-tools/pull/859


**Full Changelog**:
https://github.com/okorach/sonar-tools/compare/v2.4...v2.5
https://github.com/okorach/sonar-tools/issues?q=is%3Aissue+milestone%3Av2.5+is%3Aclosed

2.4.1

Patch release: Fixes 849 and 850

The regression impacted mostly all sonar tools:
- sonar-loc (outputting LoC onluy for the first 500 projects)
- sonar-measures-export (outputting measures only for the first 500 projects)
- sonar-audit (audited only the first 500 projects, portfolios, applications, groups, users etc...)
- sonar-housekeeper (cleaned up only among the first 500 projects and 500 user tokens)
- sonar-projects-export (exported zip only for the first 500 projects)
- sonar-config (exported the config only for the first 500 projects, portfolios, applications, groups, users etc...)

2.4

Updates
- Multi-threading for sonar-audit, sonar-findings-export and sonar-config --export for important performance (speed) gains
Several new sonar-audit audited items
- Several optimizations (caching) have been implemented to reduce number of SonarQube API calls
- Several new elements audited by sonar-audit
- All tools that connect to a SonarQube server can not specify a client certificate if needed
- Potentially long running tools displays in the logs the total execution time at end of execution
- See [What's new](doc/what-is-new.md) for more details

What's Changed
* audit displays project name when wrong permissions by okorach in https://github.com/okorach/sonar-tools/pull/764
* Audit selected keys by okorach in https://github.com/okorach/sonar-tools/pull/771
* Check existence of both main and master branch by okorach in https://github.com/okorach/sonar-tools/pull/774
* Audit global webhooks delivery failures by okorach in https://github.com/okorach/sonar-tools/pull/776
* URLs in audit reports by okorach in https://github.com/okorach/sonar-tools/pull/778
* Audit failed background tasks by okorach in https://github.com/okorach/sonar-tools/pull/781
* Dynamic determination of LTS and LATEST for audit by okorach in https://github.com/okorach/sonar-tools/pull/782
* Audit permission templates by okorach in https://github.com/okorach/sonar-tools/pull/783
* Improve performance on rules/QP management by okorach in https://github.com/okorach/sonar-tools/pull/786
* Support client certificates by okorach in https://github.com/okorach/sonar-tools/pull/790
* Export informative properties by okorach in https://github.com/okorach/sonar-tools/pull/791
* Fix Settings.set to add value to params by okorach in https://github.com/okorach/sonar-tools/pull/792
* Fix set apps with projects main branch by okorach in https://github.com/okorach/sonar-tools/pull/795
* Fix-bug-on-project-branches-retrieval by okorach in https://github.com/okorach/sonar-tools/pull/796
* Create projects submodule by okorach in https://github.com/okorach/sonar-tools/pull/797
* Create tools module by okorach in https://github.com/okorach/sonar-tools/pull/798
* Reduce-nrb-of-API-calls by okorach in https://github.com/okorach/sonar-tools/pull/799
* Multi-threaded project export and audit by okorach in https://github.com/okorach/sonar-tools/pull/801
* Multi-thread projects export as zip by okorach in https://github.com/okorach/sonar-tools/pull/804
* Threaded objects search by okorach in https://github.com/okorach/sonar-tools/pull/807
* Multi-threaded findings-search by okorach in https://github.com/okorach/sonar-tools/pull/811
* Audit scanner version by okorach in https://github.com/okorach/sonar-tools/pull/812
* Add support audit tool by okorach in https://github.com/okorach/sonar-tools/pull/814
* Add ability to comment the support ticket by okorach in https://github.com/okorach/sonar-tools/pull/815
* Verify scanner version is not to far back by okorach in https://github.com/okorach/sonar-tools/pull/816
* Add what's new by okorach in https://github.com/okorach/sonar-tools/pull/817
* Fix IT by okorach in https://github.com/okorach/sonar-tools/pull/818

**Full Changelog**: https://github.com/okorach/sonar-tools/compare/v2.3...v2.4

2.3

What's Changed

`sonar-config` now lets you import a SonarQube configuration described as JSON, either the result of a previous export or a manually modified JSON config as code.
The JSON format produced by `sonar-config` export has also been slightly modified in places, mostly to be more compact

* Some hardening fixes by okorach in https://github.com/okorach/sonar-tools/pull/620
* Export project webhooks by okorach in https://github.com/okorach/sonar-tools/pull/622
* Import global settings by okorach in https://github.com/okorach/sonar-tools/pull/617
* Import permission templates by okorach in https://github.com/okorach/sonar-tools/pull/625
* Import groups by okorach in https://github.com/okorach/sonar-tools/pull/627
* import users by okorach in https://github.com/okorach/sonar-tools/pull/632
* Import quality gates by okorach in https://github.com/okorach/sonar-tools/pull/638
* Import quality profiles by okorach in https://github.com/okorach/sonar-tools/pull/642
* Import perm template permissions by okorach in https://github.com/okorach/sonar-tools/pull/648
* Export if QP is default by okorach in https://github.com/okorach/sonar-tools/pull/649
* Import projects by okorach in https://github.com/okorach/sonar-tools/pull/651
* Import applications by okorach in https://github.com/okorach/sonar-tools/pull/652
* Import-portfolios by okorach in https://github.com/okorach/sonar-tools/pull/655
* More compact QP export by okorach in https://github.com/okorach/sonar-tools/pull/662
* Export instantiated rules by okorach in https://github.com/okorach/sonar-tools/pull/663
* Export rules and project tags by okorach in https://github.com/okorach/sonar-tools/pull/664
* Export portfolios and apps tags by okorach in https://github.com/okorach/sonar-tools/pull/665
* Import projects and apps tags by okorach in https://github.com/okorach/sonar-tools/pull/669
* Chose what to import by okorach in https://github.com/okorach/sonar-tools/pull/674
* Export customized rules (with custom tags or description) okorach in https://github.com/okorach/sonar-tools/pull/677
* Don't export rules of built-in QP and QG by okorach in https://github.com/okorach/sonar-tools/pull/679
* Import customized rules (tags, desc) by okorach in https://github.com/okorach/sonar-tools/pull/680
* Documentation by okorach in https://github.com/okorach/sonar-tools/pull/683
* simpler group export format by okorach in https://github.com/okorach/sonar-tools/pull/690
* Export import of main branch name by okorach in https://github.com/okorach/sonar-tools/pull/693
* Import DevOps integration settings by okorach in https://github.com/okorach/sonar-tools/pull/696
* Export protected branches by okorach in https://github.com/okorach/sonar-tools/pull/702
* Fix protected branches bug by okorach in https://github.com/okorach/sonar-tools/pull/703
* Handle import errors by okorach in https://github.com/okorach/sonar-tools/pull/704
* Import portfolio hierarchy by okorach in https://github.com/okorach/sonar-tools/pull/707
* Import subportfolios by okorach in https://github.com/okorach/sonar-tools/pull/709
* Apply non additive permissions by okorach in https://github.com/okorach/sonar-tools/pull/723
* Don't export empty descriptions by okorach in https://github.com/okorach/sonar-tools/pull/735
* Don't export branch-without-config by okorach in https://github.com/okorach/sonar-tools/pull/736
* Project settings import by okorach in https://github.com/okorach/sonar-tools/pull/741
* Import projects webhooks by okorach in https://github.com/okorach/sonar-tools/pull/744
* Import-specific-keys by okorach in https://github.com/okorach/sonar-tools/pull/747
* Hardening sonar-config by okorach in https://github.com/okorach/sonar-tools/pull/756
* Fix regressions by okorach in https://github.com/okorach/sonar-tools/pull/757
* Compatibility developer and community edition by okorach in https://github.com/okorach/sonar-tools/pull/758
* Fix sonar-audit config creation by okorach in https://github.com/okorach/sonar-tools/pull/762
* Update docs by okorach in https://github.com/okorach/sonar-tools/pull/763


**Full Changelog**: https://github.com/okorach/sonar-tools/compare/v2.2...v2.3

Page 4 of 11

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.