Security Hotspots not visible in Development Studio

[lievencardoen]

Hi Gilles,

Is there a way to see Security Hotspots in the OpenEdge IDE? Or am I doing something wrong.

Security Hotspots reported by Sonar and visible in the Sonar Web UI are not reported in my Development Studio...

Kind regards, Lieven

[gquerret]

I don't use that often, but you can use the "Open in IDE" button from SonarQube:

Then select the right IDE:

This opens the file in PDSOE:

This is the only way to do that in Eclipse: https://docs.sonarsource.com/sonarlint/eclipse/using-sonarlint/security-hotspots/#hotspot-analysis

Execution of security hotspots is currently not available in SonarLint for VS Code (for ABL code), it will be added soon.

[lievencardoen]

Hi Gilles, so you can see them in Development Studio, but only if you do it from Sonar and Open in IDE?

There's no way to do that scan in Development Studio? Am I correct?

Thx, Lieven

[lievencardoen]

Do you need to configure Sonar somehow to let it open in an IDE?

[gquerret]

There's no way to do that scan in Development Studio? Am I correct?

Yes, you can't do the scan from PDSOE, and I don't think SLint Eclipse will ever support that. It will be possible in VS Code.

Do you need to configure Sonar somehow to let it open in an IDE?

Which version of the SonarLint plugin do you use ? My test was done with SonarLint 10.4.3202.

[lievencardoen]

SonarLint for Eclipse 9.3.3002.

Outdated?

[gquerret]

Depending on your version of PDSOE, you can update to 10.3 or 10.4: https://github.com/Riverside-Software/sonar-openedge/wiki/SonarLint-for-Eclipse#download-and-install