{"definitions":[{"key":"sonar.abap.file.suffixes","name":"File suffixes","description":"List of suffixes for files to analyze. To not filter, leave the list empty.","category":"ABAP","subCategory":"General","defaultValue":".abap,.ab4,.flow,.asprog","multiValues":true,"options":[],"fields":[]},{"key":"sonar.sca.featureEnabled","name":"SCA enabled","description":"Enable SCA","type":"BOOLEAN","category":"Advanced Security","subCategory":"SCA","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.sca.enabled","name":"Perform dependency analysis for all projects in this organization","description":"When enabled, dependency analysis will run on all project analyses by default.\nIf this option is disabled, you must enable dependency analysis on a project-by-project basis in each project\u0027s settings.","type":"BOOLEAN","category":"Advanced Security","subCategory":"SCA","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.sca.analysisMode","name":"Analysis mode","description":"Controls how analysis is performed.\n\u003cul\u003e\n  \u003cli\u003e\u003cb\u003ecloud\u003c/b\u003e: Upload project dependency files to Sonar, which runs both parsing and analysis.\u003c/li\u003e\n  \u003cli\u003e\u003cb\u003elocal-parsing\u003c/b\u003e (default): Parse project dependency files on SonarQube Server.\n  Check each dependency for license and vulnerability information via a Sonar service.\n  Files from your projects do not leave your network in this mode.\u003cbr\u003eThis mode requires more CPU and memory on the SonarQube Server compute engine.\u003c/li\u003e\n\u003c/ul\u003e","type":"SINGLE_SELECT_LIST","category":"Advanced Security","subCategory":"SCA","defaultValue":"local-parsing","options":["cloud","local-parsing"],"fields":[]},{"key":"sonar.sca.lightwell.enabled","name":"Use Lightwell as an alternative release source","description":"When enabled, SonarQube is aware of Red Hat\u0027s Lightwell releases when computing\nwhich vulnerabilities apply to releases and which fixes are available.\nEnabling this is not recommended if you do not have access to Lightwell Network.","type":"BOOLEAN","category":"Advanced Security","subCategory":"SCA","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.sca.rescan.frequency","name":"Branch rescan frequency","description":"Branches will be rescanned at this frequency. Hourly rescanning requires an Enterprise-level Advanced Security entitlement.","type":"SINGLE_SELECT_LIST","category":"Advanced Security","subCategory":"SCA","defaultValue":"Daily","options":["Hourly","Daily","Weekly","Never"],"fields":[]},{"key":"sonar.sca.rescan.branch_type","name":"Branch rescan target branch types","description":"Which types of branches should be rescanned","type":"SINGLE_SELECT_LIST","category":"Advanced Security","subCategory":"SCA","defaultValue":"Kept branches only","options":["All branches","Main branch only","Kept branches only"],"fields":[]},{"key":"sonar.autodetect.ai.code","name":"Autodetect AI-Generated Code (DEPRECATED)","description":"Activate this option to allow SonarQube Server to autodetect AI-generated code in projects.\nThis feature currently supports organizations using GitHub and GitHub Copilot,\nand relies on the “GitHub Copilot Business” Organization permission from the GitHub App.","type":"BOOLEAN","category":"ai_code","subCategory":"ai_code","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.ansible.activate","name":"Activate Ansible analysis","description":"Activate analysis of Yaml files recognized as Ansible files.","type":"BOOLEAN","category":"Ansible","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.dre.apex.activate","name":"Activate Apex analysis","description":"Activate analysis of Apex files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"Apex","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.apex.file.suffixes","name":"Apex file suffixes","description":"List of suffixes of Apex files to index and consider for analyses.","category":"Apex","subCategory":"Analysis Scope","defaultValue":".cls,.trigger,.apex","multiValues":true,"options":[],"fields":[]},{"key":"sonar.apex.coverage.reportPath","name":"Path to coverage report","description":"Path to coverage report file (test-result-codecoverage.json) generated by Salesforce CLI test command for Apex. The path may be absolute or relative to the project base directory.","category":"Apex","subCategory":"Coverage","options":[],"fields":[]},{"key":"sonar.auth.saml.enabled","name":"Enabled","description":"Enable SAML users to login. Value is ignored if provider ID, login url, certificate, login, name attributes are not defined.","type":"BOOLEAN","category":"authentication","subCategory":"saml","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.auth.github.enabled","name":"Enabled","description":"Enable GitHub users to login. Value is ignored if client ID and secret are not defined.","type":"BOOLEAN","category":"authentication","subCategory":"github","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.auth.gitlab.enabled","name":"Enabled","description":"Enable Gitlab users to login. Value is ignored if URL, Application ID, and Secret are not set.","type":"BOOLEAN","category":"authentication","subCategory":"gitlab","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.auth.bitbucket.enabled","name":"Enabled","description":"Enable Bitbucket users to login. Value is ignored if consumer key and secret are not defined.","type":"BOOLEAN","category":"authentication","subCategory":"bitbucket","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.auth.saml.applicationId","name":"Application ID","description":"The identifier used on the Identity Provider for registering SonarQube.","category":"authentication","subCategory":"saml","defaultValue":"sonarqube","options":[],"fields":[]},{"key":"sonar.auth.gitlab.url","name":"GitLab URL","description":"Base URL to access GitLab. https://gitlab.com for Gitlab SaaS","category":"authentication","subCategory":"gitlab","defaultValue":"https://gitlab.com","options":[],"fields":[]},{"key":"sonar.auth.saml.providerName","name":"Provider Name","description":"Name of the Identity Provider displayed in the login page when SAML authentication is active.","category":"authentication","subCategory":"saml","defaultValue":"SAML","options":[],"fields":[]},{"key":"sonar.auth.bitbucket.allowUsersToSignUp","name":"Allow users to sign up","description":"Allow new users to authenticate. When set to disabled, only existing users will be able to authenticate.","type":"BOOLEAN","category":"authentication","subCategory":"bitbucket","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.auth.github.appId","name":"App ID","description":"The App ID is found on your GitHub App\u0027s page on GitHub at Settings \u003e Developer Settings \u003e GitHub Apps.","category":"authentication","subCategory":"github","options":[],"fields":[]},{"key":"sonar.auth.saml.providerId","name":"Provider ID","description":"Identifier of the Identity Provider, the entity that provides SAML authentication.","category":"authentication","subCategory":"saml","options":[],"fields":[]},{"key":"sonar.auth.gitlab.allowUsersToSignUp","name":"Allow users to sign up","description":"Allow new users to authenticate. When set to disabled, only existing users will be able to authenticate to the server.","type":"BOOLEAN","category":"authentication","subCategory":"gitlab","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.auth.saml.loginUrl","name":"SAML login url","description":"The URL where the Identity Provider expects to receive SAML requests.","category":"authentication","subCategory":"saml","options":[],"fields":[]},{"key":"sonar.auth.github.allowUsersToSignUp","name":"Allow users to sign up","description":"Allow new users to authenticate. When set to disabled, only existing users will be able to authenticate to the server.","type":"BOOLEAN","category":"authentication","subCategory":"github","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.auth.gitlab.allowedGroups","name":"Allowed groups","description":"Only members of these groups (and sub-groups) will be allowed to authenticate. Please enter the group slug as it appears in the GitLab URL, for instance `my-gitlab-group`. If you use Auto-provisioning, only members of these groups (and sub-groups) will be provisioned. Ignored when \u0027Allow all groups\u0027 is enabled.","category":"authentication","subCategory":"gitlab","multiValues":true,"options":[],"fields":[]},{"key":"sonar.auth.gitlab.allowAllGroups","name":"Allow all groups","description":"When enabled with Auto-provisioning, every group visible to the provisioning token is provisioned, and the Allowed groups list is ignored. Has no effect with Just-in-Time provisioning. Security risk: any user belonging to any group accessible by the provisioning token will be granted access. Restrict access using Allowed groups unless broad access is intentional. Not supported on GitLab.com (SaaS): the setting is ignored when the configured URL is gitlab.com, since the provisioning token may have visibility into a much larger and unbounded set of groups. Performance note: login may be slower for users belonging to a large number of groups, as all their groups must be fetched from GitLab on every authentication.","type":"BOOLEAN","category":"authentication","subCategory":"gitlab","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.auth.saml.user.login","name":"SAML user login attribute","description":"The name of the attribute where the SAML Identity Provider will put the login of the authenticated user.","category":"authentication","subCategory":"saml","options":[],"fields":[]},{"key":"sonar.auth.github.groupsSync","name":"Synchronize teams as groups","description":"Synchronize GitHub team with SonarQube group memberships when users log in to SonarQube. For each GitHub team they belong to, users will be associated to a group of the same name if it exists in SonarQube.","type":"BOOLEAN","category":"authentication","subCategory":"github","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.auth.saml.user.name","name":"SAML user name attribute","description":"The name of the attribute where the SAML Identity Provider will put the name of the authenticated user.","category":"authentication","subCategory":"saml","options":[],"fields":[]},{"key":"sonar.auth.gitlab.groupsSync","name":"Synchronize user groups","description":"For each GitLab group they belong to, the user will be associated to a group with the same name (if it exists) in SonarQube. If enabled, the GitLab OAuth 2 application will need to provide the api scope.","type":"BOOLEAN","category":"authentication","subCategory":"gitlab","defaultValue":"false","options":[],"fields":[],"deprecatedKey":"sonar.auth.gitlab.sync_user_groups"},{"key":"sonar.auth.github.apiUrl","name":"The API url for a GitHub instance.","description":"The API url for a GitHub instance. https://api.github.com/ for Github.com, https://github.company.com/api/v3/ when using Github Enterprise","category":"authentication","subCategory":"github","defaultValue":"https://api.github.com/","options":[],"fields":[]},{"key":"sonar.auth.saml.user.email","name":"SAML user email attribute","description":"The name of the attribute where the SAML Identity Provider will put the email of the authenticated user.","category":"authentication","subCategory":"saml","options":[],"fields":[]},{"key":"sonar.auth.github.webUrl","name":"The WEB url for a GitHub instance.","description":"The WEB url for a GitHub instance. https://github.com/ for Github.com, https://github.company.com/ when using GitHub Enterprise.","category":"authentication","subCategory":"github","defaultValue":"https://github.com/","options":[],"fields":[]},{"key":"provisioning.github.project.visibility.enabled","name":"Provision project visibility","description":"Change project visibility based on GitHub repository visibility. If disabled, every provisioned project will be private in SonarQube and visible only to users with explicit GitHub permissions for the corresponding repository. Changes take effect at the next synchronization.","type":"BOOLEAN","category":"authentication","subCategory":"github","defaultValue":"true","options":[],"fields":[]},{"key":"provisioning.gitlab.enabled","name":"Provisioning enabled","description":"Enable Gitlab provisioning for users.","type":"BOOLEAN","category":"authentication","subCategory":"gitlab","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.auth.saml.group.name","name":"SAML group attribute","description":"Attribute defining the user groups in SAML, used to synchronize group memberships. If you leave this field empty, group memberships will not be synced when users log in.","category":"authentication","subCategory":"saml","options":[],"fields":[]},{"key":"sonar.auth.saml.signature.enabled","name":"Sign requests","description":"Enables signature of SAML requests. It requires both service provider private key and certificate to be set.","type":"BOOLEAN","category":"authentication","subCategory":"saml","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.azurepipelines.activate","name":"Activate analysis of Azure Pipelines","description":"Activate analysis of Yaml files recognized as Azure Pipelines files.","type":"BOOLEAN","category":"Azure Pipelines","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.azureresourcemanager.activate","name":"Activate AzureResourceManager analysis","description":"Activate analysis of JSON and Bicep files recognized as ARM files.","type":"BOOLEAN","category":"AzureResourceManager","subCategory":"General","defaultValue":"true","options":[],"fields":[],"deprecatedKey":"sonar.arm.activate"},{"key":"sonar.azureresourcemanager.file.suffixes","name":"File Suffixes","description":"List of suffixes of AzureResourceManager files to analyze next to JSON.","category":"AzureResourceManager","subCategory":"General","defaultValue":".bicep","multiValues":true,"options":[],"fields":[]},{"key":"sonar.azureresourcemanager.file.identifier","name":"JSON Template File Identifiers","description":"ARM JSON templates without any of the identifiers are excluded from the analysis. The identifier can be anywhere in the file. Only one identifier of the list needs to be matched for the file to be included.","category":"AzureResourceManager","subCategory":"General","defaultValue":"https://schema.management.azure.com/schemas/,http://schema.management.azure.com/schemas/","multiValues":true,"options":[],"fields":[],"deprecatedKey":"sonar.arm.file.identifier"},{"key":"sonar.c.file.suffixes","name":"C file suffixes","description":"List of suffixes of C files to index and consider for analyses.","category":"C / C++ / Objective-C","subCategory":"  Analysis Scope","defaultValue":".c,.h","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cpp.file.suffixes","name":"C++ file suffixes","description":"List of suffixes of C++ files to index and consider for analyses.","category":"C / C++ / Objective-C","subCategory":"  Analysis Scope","defaultValue":".cc,.cpp,.cxx,.c++,.hh,.hpp,.hxx,.h++,.ipp,.ixx,.mxx,.cppm,.ccm,.cxxm,.c++m","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cfamily.ctuAnalysis.branchSubstring","name":"CTU analysis branch substring","description":"If set, CTU analysis will be enabled on branches whose name includes this text. To run it on all branches, enter \"all branches\" (without quotes).","category":"C / C++ / Objective-C","subCategory":"  General Analysis Settings","options":[],"fields":[]},{"key":"sonar.objc.file.suffixes","name":"Objective-C file suffixes","description":"List of suffixes of Objective-C files  to index and consider for analyses.","category":"C / C++ / Objective-C","subCategory":"  Analysis Scope","defaultValue":".m","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cfamily.ctuAnalysis.experimentalAllowServerCache","name":"Allow CTU analysis with the server-side analysis cache (experimental)","description":"If set to \"true\", CTU analysis can run using server-side analysis cache.\nThis combination is experimental and is not available on SonarQube Cloud.\nBeware of potential large bandwidth and storage costs incured by large CTU analysis cache.","type":"BOOLEAN","category":"C / C++ / Objective-C","subCategory":"  General Analysis Settings","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.cfamily.bullseye.reportPath","name":"Bullseye XML report","description":"Path to the Bullseye XML Coverage report. The path may be either absolute or relative to the project base directory.","category":"C / C++ / Objective-C","subCategory":" Coverage","options":[],"fields":[]},{"key":"sonar.cfamily.cobertura.reportPaths","name":"Cobertura XML reports","description":"Comma-delimited list of paths to Cobertura XML Coverage reports. The paths may be absolute or relative to the project base directory.","category":"C / C++ / Objective-C","subCategory":" Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cfamily.cppunit.reportsPath","name":"CppUnit reports","description":"Path to the directory containing the *.xml CppUnit report files. The path may be either absolute or relative to the project base directory.","category":"C / C++ / Objective-C","subCategory":" Tests","options":[],"fields":[],"deprecatedKey":"sonar.cpp.cppunit.reportsPath"},{"key":"sonar.cfamily.gcov.reportsPath","name":"Gcov reports","description":"Path to the directory containing the *.gcov Gcov report files. The path may be either absolute or relative to the project base directory.","category":"C / C++ / Objective-C","subCategory":" Coverage","options":[],"fields":[],"deprecatedKey":"sonar.cpp.gcov.reportsPath"},{"key":"sonar.cfamily.llvm-cov.reportPath","name":"llvm-cov report","description":"Path to the Coverage report generated by \"llvm-cov show\". The path may be either absolute or relative to the project base directory.","category":"C / C++ / Objective-C","subCategory":" Coverage","options":[],"fields":[]},{"key":"sonar.cfamily.valgrind.reportsPaths","name":"Valgrind XML reports","description":"Comma-delimited list of patterns for Valgrind Memcheck and Helgrind XML reports. The pattern may be either absolute or relative to the project base directory. For example: \"**/valgrind.xml\" will find all \"valgrind.xml\" files in all sub-directories of current project.","category":"C / C++ / Objective-C","subCategory":" Dynamic Analysis","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cfamily.vscoveragexml.reportsPath","name":"Visual Studio XML reports","description":"Pattern for search for Visual Studio Coverage XML reports. The pattern may be either absolute or relative to the project base directory. For example: \"**/*.coveragexml\" will find all \"*.coveragexml\" files in all sub-directories of current project.","category":"C / C++ / Objective-C","subCategory":" Coverage","options":[],"fields":[]},{"key":"sonar.cs.analyzeGeneratedCode","name":"Analyze generated code","description":"If set to \"true\", the files containing generated code are analyzed. If set to \"false\", the files containing generated code are ignored.","type":"BOOLEAN","category":"C#","subCategory":"C#","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.cs.analyzeRazorCode","name":"Analyze Razor code","description":"If set to \"true\", .razor and .cshtml files will be fully analyzed, this may increase the analysis time. If set to \"false\", .cshtml files will be analyzed for taint vulnerabilities only.","type":"BOOLEAN","category":"C#","subCategory":"C#","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.cs.file.suffixes","name":"File suffixes","description":"List of suffixes for files to analyze.","category":"C#","subCategory":"C#","defaultValue":".cs,.razor","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cs.ignoreHeaderComments","name":"Ignore header comments","description":"If set to \"true\", the file headers (that are usually the same on each file: licensing information for example) are not considered as comments. Thus metrics such as \"Comment lines\" do not get incremented. If set to \"false\", those file headers are considered as comments and metrics such as \"Comment lines\" get incremented.","type":"BOOLEAN","category":"C#","subCategory":"C#","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.cloudformation.activate","name":"Activate CloudFormation analysis","description":"Activate analysis of JSON and Yaml files recognized as CloudFormation files.","type":"BOOLEAN","category":"CloudFormation","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.cloudformation.file.identifier","name":"File Identifier","description":"Files without the identifier are excluded from the analysis. The identifier can be anywhere in the file.","category":"CloudFormation","subCategory":"General","defaultValue":"AWSTemplateFormatVersion","options":[],"fields":[]},{"key":"sonar.cobol.aucobol.preprocessor.directives.default","name":"AcuCobol preprocessor default directives","description":"This property allows to set preprocessor directives used to compile every COBOL program. See the \u0027ACUCOBOL-GT Source Code Control directives\u0027 section in the \u003ca target\u003d\"_blank\" href\u003d\"http://docs.sonarqube.org/display/PLUG/COBOL+Plugin+Advanced+Configuration\"\u003edocumentation of the plugin\u003c/a\u003e.","category":"COBOL","subCategory":"Preprocessor","options":[],"fields":[]},{"key":"sonar.cobol.adaprep.activation","name":"ADAPREP preprocessor activation","description":"ADAPREP is a COBOL preprocessor which provides the programmer with the full ADABAS (See Software AG) capability. Activating this property is mandatory if the COBOL source code might contain some ADAPREP directives.","type":"BOOLEAN","category":"COBOL","subCategory":"Preprocessor","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.cobol.copy.suffixes","name":"Copy suffixes","description":"List of suffixes for copybook to analyze, ex: \u0027cpy\u0027, \u0027cbl\u0027. To not filter, leave the list empty.","category":"COBOL","subCategory":"Preprocessor","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cobol.copy.directories","name":"Copybook directories","description":"List of all directories containing some copybooks required to analyze the COBOL programs. Both relative and absolute paths can be used.","category":"COBOL","subCategory":"Preprocessor","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cobol.copy.exclusions","name":"Copybooks to exclude","description":"List of copybooks exclusion patterns. If one copybook name matches one exclusion pattern, no violation will be reported on this copybook. The exclusion pattern must be a case-insensitive regular expression and should not include the copybook suffix.\u003cp\u003eFor instance \"one\\d*,TWO.\" will exclude violations reported on one23.cpy, ONE111.cpy, TWOX, and TWO2.cpy copybooks.\u003c/p\u003e","category":"COBOL","subCategory":"Preprocessor","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cobol.byteBasedColumnCount","name":"Count columns based on bytes","description":"This property should be set to true if source columns have to be counted based on bytes rather than characters. That may be useful for projects using double-byte character set.","type":"BOOLEAN","category":"COBOL","subCategory":"COBOL","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.cobol.preprocessor.skipping.first.matching.characters","name":"Custom skipping preprocessor first matching characters","description":"\u003cp\u003eTo support a maximum number of legacy COBOL preprocessors, this property allows to define which lines of code should be considered as a preprocessing line and so should be ignored when analyzing the COBOL source code.\u003c/p\u003e\u003cp\u003eFor example, if this property is set to \u0027%\u0027, all lines starting with a \u0027%\u0027 character, and whatever is the position of this first character in the line, won\u0027t be analyzed. If this property is set to \u0027%?\u0027, all lines starting with a \u0027%\u0027 or a \u0027?\u0027 will be ignored.\u003c/p\u003e","category":"COBOL","subCategory":"Preprocessor","options":[],"fields":[]},{"key":"sonar.cobol.db2include.directories","name":"DB2 Include directories","description":"List of all directories (either relative or absolute paths) containing some copybooks required to analyze the COBOL programs. This property is used when interpreting the DB2 INCLUDE preprocessing directive (EXEC SQL INCLUDE ... END-EXEC) to locate the copybook files. When this property is not set, the property \"sonar.cobol.copy.directories\" is used instead.","category":"COBOL","subCategory":"SQL/CICS","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cobol.dialect","name":"Dialect","description":"The COBOL dialect to be used for the analysis.","type":"SINGLE_SELECT_LIST","category":"COBOL","subCategory":"COBOL","defaultValue":"ibm-enterprise-cobol","options":["bull-gcos-cobol","hp-tandem-cobol","ibm-os/vs-cobol","ibm-ile-cobol","ibm-cobol/ii","ibm-cobol/400","ibm-enterprise-cobol","microfocus-cobol","microfocus-acucobol-gt-cobol","opencobol/cobol-it"],"fields":[]},{"key":"sonar.cobol.exec.recoveryMode","name":"Exec SQL/CICS Recovery mode","description":"This option must be activated when the COBOL parser is unable to parse a specific SQL dialect like Pro*Cobol for instance.","type":"BOOLEAN","category":"COBOL","subCategory":"SQL/CICS","defaultValue":"true","options":[],"fields":[],"deprecatedKey":"sonar.cobol.sql.recoveryMode"},{"key":"sonar.cobol.file.suffixes","name":"File suffixes","description":"List of suffixes for files to analyze. To not filter, leave the list empty.","category":"COBOL","subCategory":"COBOL","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cpd.cobol.ignoreLiteral","name":"Ignore literals","description":"If true, CPD ignores literal value differences when evaluating a duplicated block. This means that \u0027my first text\u0027; and \u0027my second text\u0027 will be seen as equivalent.","type":"BOOLEAN","category":"COBOL","subCategory":"Duplications","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.cobol.compilationConstants","name":"Microfocus Compilation Constants","description":"If your code takes advantage of conditional compilation features provided by Microfocus, you may have to configure compiler constants for your analysis.","type":"PROPERTY_SET","category":"COBOL","subCategory":"Preprocessor","multiValues":true,"options":[],"fields":[{"key":"name","name":"Compilation Constant Name","options":[]},{"key":"value","name":"Compilation Constant Value","options":[]}]},{"key":"sonar.cobol.sql.catalog.defaultSchema","name":"Names of default database schemas","description":"List of default database schemas used in embedded SQL statements. If a table name matches more than one, the table will be resolved to the first matching schema.","category":"COBOL","subCategory":"SQL/CICS","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cobol.sql.catalog.csv.path","name":"Path for database catalog CSV files","description":"Path of the directory containing CSV files for the database catalog.","category":"COBOL","subCategory":"SQL/CICS","options":[],"fields":[]},{"key":"sonar.cobol.sourceFormat","name":"Source format","description":"In fixed format, there is both a left and right margin; the indicator area is expected in column 7 and the code area ends in column 72. In variable format, there is only a left margin; the indicator area is expected in column 7. In free format, there is no margin; the indicator area is expected in column 1.","type":"SINGLE_SELECT_LIST","category":"COBOL","subCategory":"COBOL","defaultValue":"fixed","options":["fixed","variable","free"],"fields":[]},{"key":"sonar.cobol.tab.width","name":"Tab width","description":"Number of expanded spaces for a tab character (\u0027\t\u0027). This property really matters when the Source format is \"fixed\".","type":"INTEGER","category":"COBOL","subCategory":"COBOL","defaultValue":"8","options":[],"fields":[]},{"key":"sonar.css.file.suffixes","name":"File Suffixes","description":"List of suffixes for files to analyze.","category":"CSS","subCategory":"General","defaultValue":".css,.less,.scss,.sass","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dart.lcov.reportPaths","name":"Coverage reports","description":"Paths to Dart lcov coverage report files. Each path can be either absolute or relative to the project base directory. Wildcard patterns are accepted (*, ** and ?).","category":"Dart","subCategory":"Dart","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dart.file.suffixes","name":"Dart file suffixes","description":"List of suffixes of Dart files to index and consider for analyses.","category":"Dart","subCategory":"Dart","defaultValue":".dart","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dre.delphi.activate","name":"Activate Delphi analysis","description":"Activate analysis of Delphi files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"Delphi","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.delphi.codePage","name":"Code page","description":"Code page to use when interpreting ANSI data. Use 0 for the system code page. Defaults to DCC_CodePage from project files.","category":"Delphi","subCategory":"Project Options","options":[],"fields":[]},{"key":"sonar.delphi.conditionalDefines","name":"Conditional defines","description":"Conditional symbols to consider defined when evaluating conditional directives.","category":"Delphi","subCategory":"Project Options","multiValues":true,"options":[],"fields":[]},{"key":"sonar.delphi.conditionalUndefines","name":"Conditional undefines","description":"Conditional symbols to consider undefined when evaluating conditional directives.","category":"Delphi","subCategory":"Project Options","multiValues":true,"options":[],"fields":[]},{"key":"sonar.delphi.coverage.reportPaths","name":"Coverage report paths","description":"List of directories containing DelphiCodeCoverage XML reports, or paths to the report files themselves. Each path can be absolute or relative to the project base directory.","category":"Delphi","subCategory":"Test and Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.delphi.compilerVersion","name":"Delphi compiler version","description":"The compiler version symbol, such as VER360. Format: VER\u003cnnn\u003e. When unset, each Delphi analyzer applies its own default.","category":"Delphi","subCategory":"Toolchain","options":[],"fields":[]},{"key":"sonar.delphi.file.suffixes","name":"Delphi file suffixes","description":"List of suffixes of Delphi files to index and consider for analyses.","category":"Delphi","subCategory":"Analysis Scope","defaultValue":"pas,dpr,dpk","multiValues":true,"options":[],"fields":[]},{"key":"sonar.delphi.installationPath","name":"Delphi installation path","description":"Path to the Delphi installation folder. It must point to a valid Delphi installation.","category":"Delphi","subCategory":"Toolchain","defaultValue":"C:\\Program Files (x86)\\Embarcadero\\Studio\\22.0","options":[],"fields":[]},{"key":"sonar.delphi.toolchain","name":"Delphi toolchain","description":"The dcc* compiler name, such as DCC64 or DCCLINUX64. Case-insensitive. When unset, DCC32.","category":"Delphi","subCategory":"Toolchain","options":[],"fields":[]},{"key":"sonar.delphi.nunit.reportPaths","name":"NUnit report paths","description":"List of directories containing NUnit XML test reports, or paths to the report files themselves. Each path can be absolute or relative to the project base directory.","category":"Delphi","subCategory":"Test and Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.delphi.searchPath","name":"Search path","description":"List of directories to search for include files and unit imports. Each path may be absolute or relative to the project base directory.","category":"Delphi","subCategory":"Project Options","multiValues":true,"options":[],"fields":[]},{"key":"sonar.delphi.unitAliases","name":"Unit aliases","description":"List of unit aliases, used for import resolution. Format: AliasName\u003dUnitName","category":"Delphi","subCategory":"Project Options","multiValues":true,"options":[],"fields":[]},{"key":"sonar.delphi.unitScopeNames","name":"Unit scope names","description":"List of unit scope names, used for import resolution.","category":"Delphi","subCategory":"Project Options","multiValues":true,"options":[],"fields":[]},{"key":"sonar.docker.activate","name":"Activate Docker Analysis","description":"Disabling Docker analysis ensures that no Docker files are parsed, highlighted and analyzed, and no IaC analysis results are included in the quality gate.","type":"BOOLEAN","category":"Docker","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.docker.file.patterns","name":"File Patterns","description":"List of file patterns of Docker files to be indexed. Default patterns also exclude .md, .j2, and Jenkinsfile files unless a non-default pattern is added. Details on the expected format can be found on the \u0027Docker\u0027 documentation page.","category":"Docker","subCategory":"General","defaultValue":"*.dockerfile,Dockerfile,dockerfile,*.containerfile,Containerfile,containerfile","multiValues":true,"options":[],"fields":[]},{"key":"sonar.global.exclusions","name":"Global Source File Exclusions","category":"exclusions","subCategory":"files","multiValues":true,"options":[],"fields":[]},{"key":"sonar.exclusions","name":"Source File Exclusions","category":"exclusions","subCategory":"files","multiValues":true,"options":[],"fields":[]},{"key":"sonar.global.test.exclusions","name":"Global Test File Exclusions","category":"exclusions","subCategory":"files","multiValues":true,"options":[],"fields":[]},{"key":"sonar.issue.ignore.allfile","name":"Ignore Issues on Files","description":"Patterns to ignore all issues on files that contain a block of code matching a given regular expression.","type":"PROPERTY_SET","category":"exclusions","subCategory":"issues","options":[],"fields":[{"key":"fileRegexp","name":"Regular Expression","description":"If this regular expression is found in a file, then the whole file is ignored.","options":[]}]},{"key":"sonar.inclusions","name":"Source File Inclusions","category":"exclusions","subCategory":"files","multiValues":true,"options":[],"fields":[]},{"key":"sonar.issue.ignore.block","name":"Ignore Issues in Blocks","description":"Patterns to ignore all issues on specific blocks of code, while continuing to scan and mark issues on the remainder of the file.","type":"PROPERTY_SET","category":"exclusions","subCategory":"issues","options":[],"fields":[{"key":"beginBlockRegexp","name":"Regular Expression for Start of Block","description":"If this regular expression is found in a file, then following lines are ignored until end of block.","options":[]},{"key":"endBlockRegexp","name":"Regular Expression for End of Block","description":"If specified, this regular expression is used to determine the end of code blocks to ignore. If not, then block ends at the end of file.","options":[]}]},{"key":"sonar.test.exclusions","name":"Test File Exclusions","category":"exclusions","subCategory":"files","multiValues":true,"options":[],"fields":[]},{"key":"sonar.issue.ignore.multicriteria","name":"Ignore Issues on Multiple Criteria","description":"Patterns to ignore issues on certain components and for certain coding rules.\u003cbr/\u003eA rule key pattern consists of the rule repository name, followed by a colon, followed by a rule key or rule name fragment. For example:\u003cul\u003e\u003cli\u003ejava:S1195\u003c/li\u003e\u003cli\u003ejava:*Naming*\u003c/li\u003e\u003c/ul\u003e","type":"PROPERTY_SET","category":"exclusions","subCategory":"issues","options":[],"fields":[{"key":"ruleKey","name":"Rule Key Pattern","description":"Pattern to match rules which should be ignored.","options":[]},{"key":"resourceKey","name":"File Path Pattern","description":"Pattern to match files which should be ignored.","options":[]}]},{"key":"sonar.test.inclusions","name":"Test File Inclusions","category":"exclusions","subCategory":"files","multiValues":true,"options":[],"fields":[]},{"key":"sonar.issue.enforce.multicriteria","name":"Restrict Scope of Coding Rules","description":"Patterns to restrict the application of a rule to only certain components, ignoring all others.\u003cbr/\u003eA rule key pattern consists of the rule repository name, followed by a colon, followed by a rule key or rule name fragment. For example:\u003cul\u003e\u003cli\u003ejava:S1195\u003c/li\u003e\u003cli\u003ejava:*Naming*\u003c/li\u003e\u003c/ul\u003e","type":"PROPERTY_SET","category":"exclusions","subCategory":"issues","options":[],"fields":[{"key":"ruleKey","name":"Rule Key Pattern","description":"Pattern used to match rules which should be restricted.","options":[]},{"key":"resourceKey","name":"File Path Pattern","description":"Pattern used to match files to which the rules should be restricted.","options":[]}]},{"key":"sonar.coverage.exclusions","category":"exclusions","subCategory":"coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cpd.exclusions","name":"Duplication Exclusions","description":"Patterns used to exclude some source files from the duplication detection mechanism. See below to know how to use wildcards to specify this property.","category":"exclusions","subCategory":"duplications","multiValues":true,"options":[],"fields":[]},{"key":"sonar.vbnet.roslyn.ignoreIssues","name":"Ignore issues from external Roslyn analyzers","description":"If set to \u0027true\u0027, issues reported by external Roslyn analyzers won\u0027t be imported.","type":"BOOLEAN","category":"External Analyzers","subCategory":"VB.NET","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.cs.roslyn.ignoreIssues","name":"Ignore issues from external Roslyn analyzers","description":"If set to \u0027true\u0027, issues reported by external Roslyn analyzers won\u0027t be imported.","type":"BOOLEAN","category":"External Analyzers","subCategory":"C#","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.vbnet.roslyn.bugCategories","name":"Rule categories associated with Bugs","description":"External rule categories to be treated as Bugs.","category":"External Analyzers","subCategory":"VB.NET","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cs.roslyn.bugCategories","name":"Rule categories associated with Bugs","description":"External rule categories to be treated as Bugs.","category":"External Analyzers","subCategory":"C#","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cs.roslyn.vulnerabilityCategories","name":"Rule categories associated with Vulnerabilities","description":"External rule categories to be treated as Vulnerabilities.","category":"External Analyzers","subCategory":"C#","multiValues":true,"options":[],"fields":[]},{"key":"sonar.vbnet.roslyn.vulnerabilityCategories","name":"Rule categories associated with Vulnerabilities","description":"External rule categories to be treated as Vulnerabilities.","category":"External Analyzers","subCategory":"VB.NET","multiValues":true,"options":[],"fields":[]},{"key":"sonar.vbnet.roslyn.codeSmellCategories","name":"Rule categories associated with Code Smells","description":"External rule categories to be treated as Code Smells. By default, external issues are Code Smells, or Bugs when the severity is error.","category":"External Analyzers","subCategory":"VB.NET","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cs.roslyn.codeSmellCategories","name":"Rule categories associated with Code Smells","description":"External rule categories to be treated as Code Smells. By default, external issues are Code Smells, or Bugs when the severity is error.","category":"External Analyzers","subCategory":"C#","multiValues":true,"options":[],"fields":[]},{"key":"sonar.githubactions.actionlint.reportPaths","name":"Actionlint Report Files","description":"Paths (absolute or relative) to the files with Actionlint issues in JSON format.","category":"External Analyzers","subCategory":"GitHub Actions","multiValues":true,"options":[],"fields":[]},{"key":"sonar.ansible.ansible-lint.reportPaths","name":"Ansible-Lint Sarif Report Files","description":"Paths (absolute or relative) to the sarif files with Ansible-Lint issues. You can use wildcard patterns to define paths.","category":"External Analyzers","subCategory":"Ansible","multiValues":true,"options":[],"fields":[]},{"key":"sonar.cloudformation.cfn-lint.reportPaths","name":"Cfn-Lint Report Files","description":"Paths (absolute or relative) to the files with Cfn-Lint issues. You can use wildcard patterns to define paths.","category":"External Analyzers","subCategory":"CloudFormation","multiValues":true,"options":[],"fields":[]},{"key":"sonar.docker.hadolint.reportPaths","name":"Hadolint Report Files","description":"Paths (absolute or relative) to the files with Hadolint issues. You can use Ant patterns to define paths.","category":"External Analyzers","subCategory":"Docker","multiValues":true,"options":[],"fields":[]},{"key":"sonar.yaml.spectral.reportPaths","name":"Spectral Report Files","description":"Paths (absolute or relative) to Spectral report files. Supports both SARIF format and native JSON format. You can use wildcard patterns to define paths.","category":"External Analyzers","subCategory":"YAML","multiValues":true,"options":[],"fields":[]},{"key":"sonar.terraform.tflint.reportPaths","name":"TFLint Report Files","description":"Paths (absolute or relative) to the files with TFLint issues. You can use Ant patterns to define paths.","category":"External Analyzers","subCategory":"Terraform","multiValues":true,"options":[],"fields":[]},{"key":"sonar.androidLint.reportPaths","name":"Android Lint Report Files","description":"Paths (absolute or relative) to xml files with Android Lint issues.","category":"External Analyzers","subCategory":"Android","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.bandit.reportPaths","name":"Bandit Report Files","description":"Paths (absolute or relative) to json files with Bandit issues.","category":"External Analyzers","subCategory":"Python","multiValues":true,"options":[],"fields":[]},{"key":"sonar.java.checkstyle.reportPaths","name":"Checkstyle Report Files","description":"Paths (absolute or relative) to xml files with Checkstyle issues.","category":"External Analyzers","subCategory":"Java","multiValues":true,"options":[],"fields":[]},{"key":"sonar.kotlin.detekt.reportPaths","name":"Detekt Report Files","description":"Paths (absolute or relative) to checkstyle xml files with Detekt issues.","category":"External Analyzers","subCategory":"Kotlin","multiValues":true,"options":[],"fields":[]},{"key":"sonar.eslint.reportPaths","name":"ESLint Report Files","description":"Paths (absolute or relative) to the JSON files with ESLint issues.","category":"External Analyzers","subCategory":"JavaScript/TypeScript","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.flake8.reportPaths","name":"Flake8 Report Files","description":"Paths (absolute or relative) to report files with Flake8 issues.","category":"External Analyzers","subCategory":"Python","multiValues":true,"options":[],"fields":[]},{"key":"sonar.kotlin.ktlint.reportPaths","name":"Ktlint Report Files","description":"Paths (absolute or relative) to checkstyle xml or json files with Ktlint issues.","category":"External Analyzers","subCategory":"Kotlin","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.mypy.reportPaths","name":"Mypy Report Files","description":"Paths (absolute or relative) to report files with Mypy issues.","category":"External Analyzers","subCategory":"Python","multiValues":true,"options":[],"fields":[]},{"key":"sonar.php.phpstan.reportPaths","name":"PHPStan Report Files","description":"Paths (absolute or relative) to report files with PHPStan issues.","category":"External Analyzers","subCategory":"PHP","multiValues":true,"options":[],"fields":[]},{"key":"sonar.java.pmd.reportPaths","name":"PMD Report Files","description":"Paths (absolute or relative) to xml files with PMD issues.","category":"External Analyzers","subCategory":"Java","multiValues":true,"options":[],"fields":[]},{"key":"sonar.php.psalm.reportPaths","name":"Psalm Report Files","description":"Paths (absolute or relative) to report files with Psalm issues.","category":"External Analyzers","subCategory":"PHP","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.pylint.reportPaths","name":"Pylint Report Files","description":"Paths (absolute or relative) to report files with Pylint issues.","category":"External Analyzers","subCategory":"Python","multiValues":true,"options":[],"fields":[]},{"key":"sonar.ruby.rubocop.reportPaths","name":"RuboCop Report Files","description":"Paths (absolute or relative) to JSON files with RuboCop issues.","category":"External Analyzers","subCategory":"Ruby","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.ruff.reportPaths","name":"Ruff Report Files","description":"Paths (absolute or relative) to report files with Ruff issues.","category":"External Analyzers","subCategory":"Python","multiValues":true,"options":[],"fields":[]},{"key":"sonar.scala.scalafix.reportPaths","name":"Scalafix Report Files","description":"Paths (absolute or relative) to text files containing Scalafix\u0027s console diagnostic output. For example: scalafix --check ... \u003e scalafix-report.txt","category":"External Analyzers","subCategory":"Scala","multiValues":true,"options":[],"fields":[]},{"key":"sonar.scala.scalastyle.reportPaths","name":"Scalastyle Report Files","description":"Paths (absolute or relative) to scalastyle xml files with Scalastyle issues.","category":"External Analyzers","subCategory":"Scala","multiValues":true,"options":[],"fields":[]},{"key":"sonar.scala.scapegoat.reportPaths","name":"Scapegoat Report Files","description":"Paths (absolute or relative) to scapegoat xml files using scalastyle format. For example: scapegoat-scalastyle.xml","category":"External Analyzers","subCategory":"Scala","multiValues":true,"options":[],"fields":[]},{"key":"sonar.java.spotbugs.reportPaths","name":"SpotBugs Report Files","description":"Paths (absolute or relative) to xml files with SpotBugs issues.","category":"External Analyzers","subCategory":"Java","multiValues":true,"options":[],"fields":[]},{"key":"sonar.css.stylelint.reportPaths","name":"Stylelint Report Files","description":"Paths (absolute or relative) to the JSON files with stylelint issues.","category":"External Analyzers","subCategory":"CSS","multiValues":true,"options":[],"fields":[]},{"key":"sonar.swift.swiftLint.reportPaths","name":"SwiftLint Report Files","description":"Paths (absolute or relative) to the JSON files with SwiftLint issues.","category":"External Analyzers","subCategory":"Swift","multiValues":true,"options":[],"fields":[]},{"key":"sonar.typescript.tslint.reportPaths","name":"TSLint Report Files","description":"Paths (absolute or relative) to the JSON files with TSLint issues.","category":"External Analyzers","subCategory":"JavaScript/TypeScript","multiValues":true,"options":[],"fields":[]},{"key":"sonar.flex.cobertura.reportPaths","name":"Cobertura xml report paths","description":"Comma separated list of paths to the Cobertura coverage report file. The paths may be either absolute or relative to the project base directory.","category":"Flex","subCategory":"Flex","multiValues":true,"options":[],"fields":[],"deprecatedKey":"sonar.flex.cobertura.reportPath"},{"key":"sonar.flex.file.suffixes","name":"File suffixes","description":"List of suffixes for files to analyze. To not filter, leave the list empty.","category":"Flex","subCategory":"Flex","defaultValue":"as","multiValues":true,"options":[],"fields":[]},{"key":"sonar.news.enabled","name":"Enable product news","description":"Show product news and announcements (including the notification bell) to users. Disable this if you don\u0027t want users connecting to third-party services for news content.","type":"BOOLEAN","category":"general","subCategory":"news","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.login.message","name":"Log-in Message","description":"If \"Display log-in message\" is set to True, the log-in message will be visible to anyone who can access the log-in page of this SonarQube instance.","type":"FORMATTED_TEXT","category":"general","subCategory":"Log-in message","options":[],"fields":[]},{"key":"sonar.login.displayMessage","name":"Display log-in Message","description":"Display the log-in message on the log-in page of this SonarQube instance. \u003cbr\u003e\u003cbr\u003eNote: If the log-in message is empty. It will not appear even if this parameter is set to True","type":"BOOLEAN","category":"general","subCategory":"Log-in message","options":[],"fields":[]},{"key":"sonar.plugins.downloadOnlyRequired","name":"Analyzers loading optimization","description":"When enabled, scanners will only download analyzers required for detected languages.","type":"BOOLEAN","category":"general","subCategory":"Performance","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.announcement.message","name":"Announcement message","description":"If \"Display announcement message\" is set to True, this message will be displayed in a warning banner to anyone who can access SonarQube. If this field is empty, no message will be displayed, even if \"Display announcement message\" is set to True.","type":"FORMATTED_TEXT","category":"general","subCategory":"announcement","options":[],"fields":[]},{"key":"sonar.builtInQualityProfiles.disableNotificationOnUpdate","name":"Avoid quality profiles notification","description":"Avoid sending email notification on each update of built-in quality profiles to quality profile administrators.","type":"BOOLEAN","category":"general","subCategory":"qualityProfile","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.report.partMaxSizeMBytes","name":"Configure the max size of the report parts when saving it on DB","description":"When scanner reports are bigger than this size,they\u0027ll be transparently split into several lines in the database.","type":"INTEGER","category":"general","subCategory":"general","defaultValue":"450","options":[],"fields":[]},{"key":"sonar.cpd.cross_project","name":"Cross project duplication detection","description":"DEPRECATED - By default, SonarQube detects duplications at project level. This means that a block duplicated on two different projects won\u0027t be reported. Setting this parameter to \"true\" allows to detect duplicates across projects. Note that activating this property will significantly increase each SonarQube analysis time, and therefore badly impact the performances of report processing as more and more projects are getting involved in this cross project duplication mechanism.","type":"BOOLEAN","category":"general","subCategory":"duplications","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.issues.defaultAssigneeLogin","name":"Default Assignee","description":"New issues will be assigned to this user each time it is not possible to determine the user who is the author of the issue.","type":"USER_LOGIN","category":"general","subCategory":"issues","options":[],"fields":[]},{"key":"sonar.projectCreation.mainBranchName","name":"Default main branch name","description":"Each project has a main branch at creation. This setting defines the instance-wide default main branch name.  A user can override this when creating a project. This setting does not apply to projects imported from a DevOps platform.","category":"general","subCategory":"subProjectCreation","defaultValue":"main","options":[],"fields":[]},{"key":"sonar.developerAggregatedInfo.disabled","name":"Disable developer aggregated information","description":"Don\u0027t show issue facets aggregating information per developer","type":"BOOLEAN","category":"general","subCategory":"issues","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.jreAutoProvisioning.disabled","name":"Disable Scanner JRE auto provisioning","description":"Deactivates the automatic download and use of a Java Runtime (JRE) by the scanner. When toggled on, you must ensure a compatible JRE is available on your build servers.","type":"BOOLEAN","category":"general","subCategory":"general","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.announcement.displayMessage","name":"Display announcement message","description":"If set to True, the \"Announcement message\" will be displayed in a warning banner to anyone who can access SonarQube.","type":"BOOLEAN","category":"general","subCategory":"announcement","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.qualityProfiles.allowDisableInheritedRules","name":"Enable deactivation of inherited rules","description":"Set if users with \u0027Administer Quality Profiles\u0027 permission are allowed to deactivate inherited rules in quality profiles.","type":"BOOLEAN","category":"general","subCategory":"qualityProfile","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.issues.issueResolution.global.enabled","name":"Enable in-code issue resolution","description":"Enable usage of in-code issue resolution with SONAR-RESOLVE across projects. Disabling this setting will prevent usage of SONAR-RESOLVE on all projects.","type":"BOOLEAN","category":"general","subCategory":"sonarResolve","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.issues.issueResolution.enabled","name":"Enable in-code issue resolution for projects by default","description":"Enable in-code issue resolution with SONAR-RESOLVE for all projects by default. Can be overridden at the project level. This setting is unavailable when the \u0027Enable in-code issue resolution\u0027 option is disabled.","type":"BOOLEAN","category":"general","subCategory":"sonarResolve","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.ce.parallelProjectTasks","name":"Enable running project analysis tasks in parallel","description":"When enabled, this feature allows parallel processing of pull request analysis tasks with other pull request or branch analysis tasks of the same project.","type":"BOOLEAN","category":"general","subCategory":"Performance","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.lf.enableGravatar","name":"Enable support of gravatars","description":"Gravatars are profile pictures of users based on their email.","type":"BOOLEAN","category":"general","subCategory":"looknfeel","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.lf.gravatarServerUrl","name":"Gravatar URL","description":"Optional URL of custom Gravatar service. Accepted variables are {EMAIL_MD5} for MD5 hash of email and {SIZE} for the picture size in pixels.","category":"general","subCategory":"looknfeel","defaultValue":"https://secure.gravatar.com/avatar/{EMAIL_MD5}.jpg?s\u003d{SIZE}\u0026d\u003didenticon","options":[],"fields":[]},{"key":"sonar.qualitygate.ignoreSmallChanges","name":"Ignore duplication and coverage on small changes","description":"Quality Gate conditions about duplications in new code and coverage on new code are ignored until the number of new lines is at least 20.","type":"BOOLEAN","category":"general","subCategory":"qualityGate","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.lf.logoUrl","name":"Logo URL","description":"URL to logo image. Any standard format is accepted.","category":"general","subCategory":"looknfeel","options":[],"fields":[],"deprecatedKey":"sonar.branding.image"},{"key":"sonar.core.serverBaseURL","name":"Server base URL","description":"HTTP(S) URL of this SonarQube server, such as \u003ci\u003ehttps://yourhost.yourdomain/sonar\u003c/i\u003e. This value is used outside SonarQube itself, e.g. for PR decoration, emails, etc.","category":"general","subCategory":"general","options":[],"fields":[]},{"key":"sonar.lf.logoWidthPx","name":"Width of image in pixels","description":"Width in pixels, constrained to 150px (the height of the image is constrained to 40px).","category":"general","subCategory":"looknfeel","options":[],"fields":[],"deprecatedKey":"sonar.branding.image.width"},{"key":"sonar.githubactions.activate","name":"Activate analysis of GitHub Actions","description":"Activate analysis of Yaml files recognized as GitHub Actions files.","type":"BOOLEAN","category":"GitHub Actions","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.go.activate","name":"Activate Go file analysis","description":"Activate analysis of all Go files.","type":"BOOLEAN","category":"Go","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.go.file.suffixes","name":"File Suffixes","description":"List of suffixes for files to analyze.","category":"Go","subCategory":"General","defaultValue":".go","multiValues":true,"options":[],"fields":[]},{"key":"sonar.go.exclusions","name":"Go Exclusions","description":"List of file path patterns to be excluded from analysis of Go files.","category":"Go","subCategory":"General","defaultValue":"**/vendor/**,**/*.pb.go,**/*.pb.gorm.go","multiValues":true,"options":[],"fields":[]},{"key":"sonar.go.tests.reportPaths","name":"Path to test execution report(s)","description":"Path to test execution reports generated by Go with \u0027-json\u0027 key, available since go1.10 (e.g.: go test -json \u003e test-report.out).","category":"Go","subCategory":"Test and Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.go.coverage.reportPaths","name":"Path to coverage report(s)","description":"Path to coverage reports generated by Go (e.g.: go test -coverprofile\u003dcoverage.out), ant patterns relative to project root are supported.","category":"Go","subCategory":"Test and Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.go.govet.reportPaths","name":"\"go vet\" Report Files","description":"Paths (absolute or relative) to the files with \"go vet\" issues.","category":"Go","subCategory":"Popular Rule Engines","multiValues":true,"options":[],"fields":[]},{"key":"sonar.go.golint.reportPaths","name":"Golint Report Files","description":"Paths (absolute or relative) to the files with Golint issues.","category":"Go","subCategory":"Popular Rule Engines","multiValues":true,"options":[],"fields":[]},{"key":"sonar.go.gometalinter.reportPaths","name":"GoMetaLinter Report Files","description":"Paths (absolute or relative) to the files with GoMetaLinter issues.","category":"Go","subCategory":"Popular Rule Engines","multiValues":true,"options":[],"fields":[]},{"key":"sonar.go.golangci-lint.reportPaths","name":"GolangCI-Lint Report Files","description":"Paths (absolute or relative) to the files with GolangCI-Lint issues.","category":"Go","subCategory":"Popular Rule Engines","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dre.gosu.activate","name":"Activate Gosu analysis","description":"Activate analysis of Gosu files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"Gosu","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.gosu.cobertura.reportPaths","name":"Cobertura report paths","description":"List of paths to Cobertura coverage reports.","category":"Gosu","subCategory":"Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.gosu.file.suffixes","name":"Gosu file suffixes","description":"List of suffixes of Gosu files to index and consider for analyses.","category":"Gosu","subCategory":"Analysis Scope","defaultValue":"gs,gsx,gsp","multiValues":true,"options":[],"fields":[]},{"key":"sonar.pdf.confidential.header.enabled","name":"Confidential Header for PDF reports","description":"Enable or disable a \"Confidential\" header in all generated PDF reports.\u003cbr\u003e\u003cbr\u003eWhen enabled, a \"Confidential\" header will appear at the top of all PDF reports to indicate sensitive content.","type":"BOOLEAN","category":"Governance","subCategory":"PDF Reports","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.governance.report.project.branch.frequency","name":"PDF Reports Frequency","description":"Define the frequency at which to send PDF reports.\u003cul\u003e\u003cli\u003e\"Daily\" \u003d\u003e report is sent on a daily basis\u003c/li\u003e\u003cli\u003e\"Weekly\" \u003d\u003e report is sent on a weekly basis\u003c/li\u003e\u003cli\u003e\"Monthly\" \u003d\u003e report is sent on a monthly basis\u003c/li\u003e\u003c/ul\u003e","type":"SINGLE_SELECT_LIST","category":"Governance","subCategory":"Project and Application PDF Reports","defaultValue":"Monthly","options":["Daily","Weekly","Monthly"],"fields":[]},{"key":"sonar.portfolios.recompute.hours","name":"Portfolio Calculation Hours","description":"Hours of the day at which outdated portfolios will be recalculated. Portfolios will be queued at the beginning of each selected hour. A 24-hour clock is used, so valid values are 0–23. If this value is empty or invalid, each portfolio will be recalculated immediately after it becomes outdated.","type":"INTEGER","category":"Governance","subCategory":"Recalculation","multiValues":true,"options":[],"fields":[]},{"key":"sonar.governance.report.view.frequency","name":"Portfolio Reports Frequency","description":"Define the default frequency that will be used to send PDF reports for portfolios.\u003cul\u003e\u003cli\u003e\"Daily\" \u003d\u003e report is sent during the first portfolio calculation of the day (if any)\u003c/li\u003e\u003cli\u003e\"Weekly\" \u003d\u003e report is sent during the first portfolio calculation of the week (if any), starting from Midnight on Monday\u003c/li\u003e\u003cli\u003e\"Monthly\" \u003d\u003e report is sent during the first portfolio calculation of the month (if any), starting from the first day of the current month\u003c/li\u003e\u003c/ul\u003e","type":"SINGLE_SELECT_LIST","category":"Governance","subCategory":"Portfolio PDF Reports","defaultValue":"Monthly","options":["Daily","Weekly","Monthly"],"fields":[]},{"key":"sonar.governance.report.view.recipients","name":"Recipients","description":"Email addresses of people who will automatically receive a PDF report for every portfolio defined in the system, based on the given frequency.","type":"EMAIL","category":"Governance","subCategory":"Portfolio PDF Reports","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dre.groovy.activate","name":"Activate Groovy analysis","description":"Activate analysis of Groovy files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"Groovy","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.groovy.cobertura.reportPaths","name":"Cobertura report paths","description":"List of paths to Cobertura coverage reports.","category":"Groovy","subCategory":"Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.groovy.file.patterns","name":"Groovy file patterns","description":"List of file patterns to identify Groovy files, including standard scripts as well as DSLs like Jenkinsfile and Gradle build scripts. This is applied in addition to the \u0027Groovy file suffixes\u0027 property.","category":"Groovy","subCategory":"Analysis Scope","defaultValue":"*Jenkinsfile","multiValues":true,"options":[],"fields":[]},{"key":"sonar.groovy.file.suffixes","name":"Groovy file suffixes","description":"List of suffixes of Groovy files to index and consider for analyses.","category":"Groovy","subCategory":"Analysis Scope","defaultValue":"groovy,gvy,gy,gsh","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dbcleaner.hoursBeforeKeepingOnlyOneSnapshotByDay","name":"Keep only one analysis a day after","description":"After this number of hours, if there are several analyses during the same day, the DbCleaner keeps the most recent one and fully deletes the other ones.","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"24","options":[],"fields":[]},{"key":"sonar.dbcleaner.daysBeforeDeletingInactiveBranchesAndPRs","name":"Number of days before purging inactive branches and pull requests","description":"Branches and pull requests are permanently deleted when there has been no analysis for the configured number of days.","type":"INTEGER","category":"housekeeping","subCategory":"branchesAndPullRequests","defaultValue":"30","options":[],"fields":[]},{"key":"sonar.dbcleaner.branchesToKeepWhenInactive","name":"Branches to keep when inactive","description":"By default, branches and pull requests are automatically deleted when inactive. This setting allows you to protect branches (but not pull requests) from this deletion. When a branch is created with a name that matches any of the regular expressions on the list of values of this setting, the branch will not be deleted automatically even when it becomes inactive.\u003cbr\u003eThe main branch of a project will never be automatically deleted when inactive.\u003cbr\u003eExample:\u003cul\u003e\u003cli\u003edevelop\u003c/li\u003e\u003cli\u003erelease-.*\u003c/li\u003e\u003c/ul\u003e","type":"REGULAR_EXPRESSION","category":"housekeeping","subCategory":"branchesAndPullRequests","defaultValue":"main,master,develop,trunk","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByWeek","name":"Keep only one analysis a week after","description":"After this number of weeks, if there are several analyses during the same week, the DbCleaner keeps the most recent one and fully deletes the other ones","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"4","options":[],"fields":[]},{"key":"sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByMonth","name":"Keep only one analysis a month after","description":"After this number of weeks, if there are several analyses during the same month, the DbCleaner keeps the most recent one and fully deletes the other ones.","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"52","options":[],"fields":[]},{"key":"sonar.dbcleaner.weeksBeforeKeepingOnlyAnalysesWithVersion","name":"Keep only analyses with a version event after","description":"After this number of weeks, the DbCleaner keeps only analyses with a version event associated.","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"104","options":[],"fields":[]},{"key":"sonar.dbcleaner.weeksBeforeDeletingAllSnapshots","name":"Delete all analyses after","description":"After this number of weeks, all analyses are fully deleted.","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"260","options":[],"fields":[]},{"key":"sonar.dbcleaner.daysBeforeDeletingClosedIssues","name":"Delete closed issues after","description":"Issues that have been closed for more than this number of days will be deleted.","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"30","options":[],"fields":[]},{"key":"sonar.dbcleaner.daysBeforeDeletingAnticipatedTransitions","name":"Delete anticipated transitions after","description":"Anticipated transitions that have not been applied for more than this number of days will be deleted.","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"30","options":[],"fields":[]},{"key":"sonar.dbcleaner.daysBeforeDeletingScannerCache","name":"Delete scanner cache after","description":"Scanner analysis cache entries that have not been updated for more than this number of days will be deleted.","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"7","options":[],"fields":[]},{"key":"sonar.dbcleaner.daysBeforeDeletingHistory","name":"Delete dashboard history after","description":"History for issue counts, issue resolution data, and measures older than this many days will be deleted.","type":"INTEGER","category":"housekeeping","subCategory":"general","defaultValue":"365","options":[],"fields":[]},{"key":"sonar.dbcleaner.auditHousekeeping","name":"Audit Logs Housekeeping Frequency","description":"Define the frequency that will be used to delete security-related audit logs.\u003cbr\u003eSetting your housekeeping policy to keep your audit logs for a long period of time (for example, only deleting logs yearly) can increase your database size and the amount of time it takes to download audit logs.\u003cul\u003e\u003cli\u003e\"Weekly\" \u003d\u003e Audit logs older than a week will be deleted\u003c/li\u003e\u003cli\u003e\"Monthly\" \u003d\u003e Audit logs older than a month will be deleted\u003c/li\u003e\u003cli\u003e\"Trimestrial\" \u003d\u003e Audit logs older than 3 months will be deleted\u003c/li\u003e\u003cli\u003e\"Yearly\" \u003d\u003e Audit logs older than a year will be deleted\u003c/li\u003e\u003c/ul\u003e","type":"SINGLE_SELECT_LIST","category":"housekeeping","subCategory":"auditLogs","defaultValue":"Monthly","options":["Weekly","Monthly","Trimestrial","Yearly"],"fields":[]},{"key":"sonar.dbcleaner.auditPurgeBatchSize","name":"Audit Logs Purge Batch Size","description":"Maximum number of audit log rows deleted in a single purge run. Increase this value on instances with a large backlog of audit logs to purge, to catch up faster. Must be between 1 and 1000000.","type":"INTEGER","category":"housekeeping","subCategory":"auditLogs","defaultValue":"100000","options":[],"fields":[]},{"key":"sonar.hunteragent.deleteOlderThan","name":"Delete Hunter job artifacts after","description":"Hunter job artifacts older than this number of days are deleted. Set the value to 0 or less to disable automatic deletion.","type":"INTEGER","category":"housekeeping","subCategory":"Agentic","defaultValue":"30","options":[],"fields":[]},{"key":"sonar.remediationagent.deleteOlderThan","name":"Delete Remediation Agent job artifacts after","description":"Remediation Agent job artifacts older than this number of days are deleted. Set the value to 0 or less to disable automatic deletion.","type":"INTEGER","category":"housekeeping","subCategory":"Agentic","defaultValue":"30","options":[],"fields":[]},{"key":"sonar.html.file.suffixes","name":"HTML File suffixes","description":"List of file suffixes that will be scanned.","category":"HTML","subCategory":"HTML","defaultValue":".html,.xhtml,.cshtml,.vbhtml,.aspx,.ascx,.rhtml,.erb,.shtm,.shtml,.cmp,.twig,.htm","multiValues":true,"options":[],"fields":[]},{"key":"sonar.jsp.file.suffixes","name":"JSP File suffixes","description":"List of JSP file suffixes that will be scanned.","category":"HTML","subCategory":"HTML","defaultValue":".jsp,.jspf,.jspx","multiValues":true,"options":[],"fields":[]},{"key":"sonar.coverage.jacoco.xmlReportPaths","description":"Paths to JaCoCo XML coverage report files. Each path can be either absolute or relative to the project base directory. Wildcard patterns are accepted (*, ** and ?).","category":"JaCoCo","subCategory":"JaCoCo","multiValues":true,"options":[],"fields":[]},{"key":"sonar.coverage.jacoco.aggregateXmlReportPaths","description":"Paths to JaCoCo XML aggregate coverage report files. Each path can be either absolute or relative to the project base directory. Wildcard patterns are accepted (*, ** and ?).","category":"JaCoCo","subCategory":"JaCoCo","multiValues":true,"options":[],"fields":[]},{"key":"sonar.java.jvmframeworkconfig.activate","name":"Activate Analysis of JVM Framework Configuration files","description":"Disabling JVM Framework Configuration analysis ensures that no JVM Framework configuration files are parsed, highlighted and analyzed, and no analysis results are included in the quality gate.","type":"BOOLEAN","category":"Java","subCategory":"JVM Framework","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.java.enablePreview","name":"Enable JDK\u0027s latest preview feature","description":"Allow to enable JDK\u0027s preview features for analysis. Only the Java\u0027s latest supported version preview features are supported.","type":"BOOLEAN","category":"java","subCategory":"Language","defaultValue":"False","options":[],"fields":[]},{"key":"sonar.java.jvmframeworkconfig.file.patterns","name":"File Patterns","description":"List of file patterns of JVM Framework configuration files to be indexed.","category":"Java","subCategory":"JVM Framework","defaultValue":"**/src/main/resources/**/*app*.properties,**/src/main/resources/**/*app*.yaml,**/src/main/resources/**/*app*.yml","multiValues":true,"options":[],"fields":[]},{"key":"sonar.java.file.suffixes","name":"File suffixes","description":"List of suffixes for Java files to analyze. To not filter, leave the list empty.","category":"java","subCategory":"General","defaultValue":".java,.jav","multiValues":true,"options":[],"fields":[]},{"key":"sonar.java.ignoreUnnamedModuleForSplitPackage","name":"Ignore unnamed module for split package","description":"\u003cp\u003ePrevent the Java parser from enforcing Java platform modularization by omitting package and class re-declarations gathered in the unnamed module.\u003c/p\u003e\u003cp\u003eWith the Java Platform Module System introduced in Java 9, packages and classes declared outside of explicitly named modules are placed in a common \"unnamed module\". When a package or class is found in both the unnamed module and a named one, modularization is broken. As a result, the parser may be unable to build the project semantic successfully, leading to analysis failure. This parameter allows users to bypass Java platform modularity enforcement to prevent analysis failure.\u003c/p\u003e","type":"BOOLEAN","category":"java","subCategory":"Language","defaultValue":"False","options":[],"fields":[]},{"key":"sonar.junit.reportPaths","name":"JUnit Report Paths","description":"Comma-separated paths to the various directories containing the *.xml JUnit report files. Each path may be absolute or relative to the project base directory.","category":"java","subCategory":"JUnit","multiValues":true,"options":[],"fields":[]},{"key":"sonar.java.springContext.model.path","name":"Spring context model file","description":"Path to the JSON file used to restore Spring context data at the start of analysis and save it afterward. When unset or blank, the path defaults to .sonar/spring-context-model.json. Relative paths use the root project directory.","category":"java","subCategory":"Frameworks","options":[],"fields":[]},{"key":"sonar.javascript.createTSProgramForOrphanFiles","name":"Create TypeScript program for orphan files","description":"Controls whether a TypeScript program should be created for files not included in any tsconfig.json. When disabled, orphan files are analyzed without type information, which is faster but may reduce analysis accuracy.","type":"BOOLEAN","category":"JavaScript / TypeScript","subCategory":"TypeScript","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.javascript.css.additional.file.suffixes","name":"CSS-in-HTML File Suffixes","description":"List of non-CSS file suffixes where embedded CSS should be analyzed.","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":".vue,.html,.htm,.xhtml","multiValues":true,"options":[],"fields":[]},{"key":"sonar.javascript.disableTypeChecking","name":"Disable TypeScript type checking","description":"Controls whether TypeScript type checking should be completely disabled during analysis. When enabled, all files are analyzed without type information, which is faster but type-aware rules will not produce results.","type":"BOOLEAN","category":"JavaScript / TypeScript","subCategory":"TypeScript","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.javascript.ecmaScriptVersion","name":"ECMAScript Version","description":"Overrides the ECMAScript version used for TypeScript program lib resolution. Accepts values like \u0027ES2022\u0027, \u0027ES2023\u0027. When set, this takes precedence over version signals detected from package.json (e.g. @types/node or engines.node).","category":"JavaScript / TypeScript","subCategory":"TypeScript","options":[],"fields":[]},{"key":"sonar.javascript.globals","name":"Global variables","description":"List of global variables.","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":"angular,goog,google,OpenLayers,d3,dojo,dojox,dijit,Backbone,moment,casper,_,sap","multiValues":true,"options":[],"fields":[]},{"key":"sonar.javascript.html.file.suffixes","name":"HTML File Suffixes","description":"List of suffixes for HTML files where embedded JavaScript should be analyzed.","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":".html,.htm,.xhtml","multiValues":true,"options":[],"fields":[]},{"key":"sonar.javascript.ignoreHeaderComments","name":"Ignore header comments","description":"True to not count file header comments in comment metrics.","type":"BOOLEAN","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.javascript.environments","name":"JavaScript execution environments","description":"List of environments names. The analyzer automatically adds global variables based on that list. Available environment names: amd, applescript, atomtest, browser, commonjs, embertest, greasemonkey, jasmine, jest, jquery, meteor, mocha, mongo, nashorn, node, phantomjs, prototypejs, protractor, qunit, serviceworker, shared-node-browser, shelljs, webextensions, worker.","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":"amd,applescript,atomtest,browser,commonjs,embertest,greasemonkey,jasmine,jest,jquery,meteor,mocha,mongo,nashorn,node,phantomjs,prototypejs,protractor,qunit,serviceworker,shared-node-browser,shelljs,webextensions,worker","multiValues":true,"options":[],"fields":[]},{"key":"sonar.javascript.file.suffixes","name":"JavaScript File Suffixes","description":"List of suffixes for files to analyze.","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":".js,.jsx,.cjs,.mjs,.vue","multiValues":true,"options":[],"fields":[]},{"key":"sonar.javascript.lcov.reportPaths","name":"LCOV Files","description":"Paths (absolute or relative) to the files with LCOV data.","category":"JavaScript / TypeScript","subCategory":"Tests and Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.javascript.maxFileSize","name":"Maximum size of analyzed files","description":"Threshold for the maximum size of analyzed files (in kilobytes). Files that are larger are excluded from the analysis.","type":"INTEGER","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":"1000","options":[],"fields":[]},{"key":"sonar.scanner.skipNodeProvisioning","name":"Skip the deployment of the embedded Node.js runtime","description":"Controls whether the scanner should skip the deployment of the embedded Node.js runtime, and use the host-provided runtime instead.\u003cbr\u003e\u003cbr\u003eAnalysis will fail if a compatible version of Node.js is not provided via \u003ccode\u003esonar.nodejs.executable\u003c/code\u003e or the \u003ccode\u003ePATH\u003c/code\u003e.","type":"BOOLEAN","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.typescript.file.suffixes","name":"TypeScript File Suffixes","description":"List of suffixes for files to analyze.","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":".ts,.tsx,.cts,.mts","multiValues":true,"options":[],"fields":[]},{"key":"sonar.typescript.tsconfigPaths","name":"TypeScript tsconfig.json location","description":"Comma-delimited list of paths to TSConfig files. Wildcards are supported.","category":"JavaScript / TypeScript","subCategory":"TypeScript","multiValues":true,"options":[],"fields":[]},{"key":"sonar.javascript.yaml.file.suffixes","name":"YAML File Suffixes","description":"List of suffixes for AWS SAM/CloudFormation YAML files with embedded JavaScript.","category":"JavaScript / TypeScript","subCategory":"General","defaultValue":".yml,.yaml","multiValues":true,"options":[],"fields":[]},{"key":"sonar.jcl.file.suffixes","name":"File Suffixes","description":"List of file suffixes of JCL files to analyze.","category":"JCL","subCategory":"General","defaultValue":".jcl","multiValues":true,"options":[],"fields":[]},{"key":"sonar.json.activate","name":"Activate JSON file analysis","description":"Activate analysis of all JSON files.","type":"BOOLEAN","category":"JSON","subCategory":"General","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.json.exclusions","name":"File exclusions for JSON analysis","description":"List of JSON file name patterns to be excluded from analysis.","category":"JSON","subCategory":"General","defaultValue":"**/package-lock.json,**/packages.lock.json,**/deno.lock.json,**/npm-shrinkwrap.json,**/package.json,**/composer.json","multiValues":true,"options":[],"fields":[]},{"key":"sonar.json.file.suffixes","name":"File Suffixes","description":"List of suffixes of JSON files to be indexed.","category":"JSON","subCategory":"General","defaultValue":".json","multiValues":true,"options":[],"fields":[]},{"key":"sonar.kotlin.file.suffixes","name":"File Suffixes","description":"List of suffixes for files to analyze.","category":"Kotlin","subCategory":"General","defaultValue":".kt,.kts","multiValues":true,"options":[],"fields":[]},{"key":"sonar.kubernetes.activate","name":"Activate Kubernetes analysis","description":"Activate analysis of Yaml files recognized as Kubernetes files.","type":"BOOLEAN","category":"Kubernetes","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.kubernetes.helm.activate","name":"Activate Kubernetes Helm analysis","description":"Activate analysis of Helm content detected in Kubernetes files.","type":"BOOLEAN","category":"Kubernetes","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.alerts.tasks.volume.threshold.value","name":"Background task queue size threshold","description":"An alert is sent when the number of tasks in the queue is above this value.","type":"INTEGER","category":"Monitoring","subCategory":"Background task queue","defaultValue":"50","options":[],"fields":[]},{"key":"sonar.alerts.tasks.age.threshold.value","name":"Background task waiting time threshold (minutes)","description":"An alert is sent when the oldest task in the queue has been waiting longer than this many minutes.","type":"INTEGER","category":"Monitoring","subCategory":"Background task waiting time","defaultValue":"30","options":[],"fields":[]},{"key":"sonar.alerts.tasks.volume.threshold.minutes","name":"Duration threshold (minutes)","description":"How long the queue size threshold must be continuously exceeded before an alert is sent or resolved.","type":"INTEGER","category":"Monitoring","subCategory":"Background task queue","defaultValue":"60","options":[],"fields":[]},{"key":"sonar.alerts.tasks.age.threshold.minutes","name":"Duration threshold (minutes)","description":"How long the waiting time threshold must be continuously exceeded before an alert is sent or resolved.","type":"INTEGER","category":"Monitoring","subCategory":"Background task waiting time","defaultValue":"60","options":[],"fields":[]},{"key":"sonar.alerts.enabled","name":"Enable monitoring alerts","description":"When enabled, SonarQube evaluates monitoring alerts and notifies administrators when they trigger or clear. When disabled, all currently active alerts are deactivated silently and no further alert evaluations take place.","type":"BOOLEAN","category":"Monitoring","subCategory":"Activation","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.alerts.tasks.failure_rate.threshold.value","name":"Failure rate threshold (percentage)","description":"Percentage of failed background tasks (out of all completed tasks in the observation window) above which an alert is sent.","type":"INTEGER","category":"Monitoring","subCategory":"Background tasks failures","defaultValue":"50","options":[],"fields":[]},{"key":"sonar.alerts.tasks.failure_rate.threshold.minutes","name":"Observation window (minutes)","description":"Length of the rolling window used to compute the background task failure rate. Tasks completed before this window are excluded from the calculation.","type":"INTEGER","category":"Monitoring","subCategory":"Background tasks failures","defaultValue":"60","options":[],"fields":[]},{"key":"sonar.dre.mulesoft.activate","name":"Activate MuleSoft analysis","description":"Activate analysis of Mule and DataWeave files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"MuleSoft","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.dataweave.file.suffixes","name":"DataWeave file suffixes","description":"List of suffixes of DataWeave files to index and consider for analyses.","category":"MuleSoft","subCategory":"Analysis Scope","defaultValue":"dwl","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dre.mulesoft.muleArtifactPath","name":"Mule Artifact Path","description":"Path to the Mule application mule-artifact.json file.","category":"MuleSoft","subCategory":"Analysis Scope","options":[],"fields":[]},{"key":"sonar.mulesoft.munit.jsonReportPaths","name":"MUnit coverage report paths","description":"Comma-delimited list of paths to MUnit coverage JSON reports. The paths may be absolute or relative to the project base directory.","category":"MuleSoft","subCategory":"Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.php.coverage.reportPaths","name":"Coverage Reports","description":"List of PHPUnit code coverage report files. Each path can be either absolute or relative.","category":"PHP","subCategory":"PHPUnit","multiValues":true,"options":[],"fields":[]},{"key":"sonar.php.file.suffixes","name":"File Suffixes","description":"List of suffixes of PHP files to analyze.","category":"PHP","subCategory":"General","defaultValue":"php,php3,php4,php5,phtml,inc","multiValues":true,"options":[],"fields":[]},{"key":"sonar.php.exclusions","name":"PHP Exclusions","description":"List of file path patterns to be excluded from analysis of PHP files.","category":"PHP","subCategory":"General","defaultValue":"**/vendor/**","multiValues":true,"options":[],"fields":[]},{"key":"sonar.php.frameworkDetection","name":"PHP Framework detection","description":"Enable the detection of PHP framework in analyzed file, which adapt some rules behavior.","category":"PHP","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.php.tests.reportPath","name":"Unit Test Report","description":"Comma-separated list of paths to PHPUnit unit test execution report files. Paths may be either absolute or relative to the project base directory.","category":"PHP","subCategory":"PHPUnit","multiValues":true,"options":[],"fields":[]},{"key":"sonar.pli.extralingualCharacters","name":"Extralingual characters","description":"Extralingual characters which should be considered as valid in identifiers. No separator should be used. Example: #@$£§","category":"PL/I","subCategory":"PL/I","defaultValue":"#@$","options":[],"fields":[]},{"key":"sonar.pli.file.suffixes","name":"File suffixes","description":"List of suffixes for PL/I files to analyze. To not change the defaults, leave the list empty.","category":"PL/I","subCategory":"PL/I","defaultValue":".pli","multiValues":true,"options":[],"fields":[]},{"key":"sonar.pli.ignoreHeaderComments","name":"Ignore header comments","description":"Set to \u0027true\u0027 to enable, or \u0027false\u0027 to disable.","type":"BOOLEAN","category":"PL/I","subCategory":"PL/I","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.pli.marginLeft","name":"Margin left","description":"The column number of the source\u0027s leftmost character, must be greater or equal to 1.","type":"INTEGER","category":"PL/I","subCategory":"PL/I","defaultValue":"2","options":[],"fields":[]},{"key":"sonar.pli.marginRight","name":"Margin right","description":"The column number of the source\u0027s rightmost character, must be greater or equal to the leftmost\u0027s one, or 0 to indicate an unlimited right margin.","type":"INTEGER","category":"PL/I","subCategory":"PL/I","defaultValue":"72","options":[],"fields":[]},{"key":"sonar.dre.powershell.activate","name":"Activate PowerShell analysis","description":"Activate analysis of PowerShell files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"PowerShell","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.powershell.file.suffixes","name":"PowerShell file suffixes","description":"List of suffixes of PowerShell files to index and consider for analyses.","category":"PowerShell","subCategory":"Analysis Scope","defaultValue":"ps1,psm1,psd1","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.file.suffixes","name":"File Suffixes","description":"List of suffixes of Python files to analyze.","category":"Python","subCategory":"General","defaultValue":"py","multiValues":true,"options":[],"fields":[]},{"key":"sonar.ipynb.file.suffixes","name":"IPython File Suffixes","description":"List of suffixes of IPython Notebooks files to analyze.","category":"Python","subCategory":"General","defaultValue":"ipynb","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.version","name":"Python versions","description":"Comma-separated list of Python versions or version specifiers this project is compatible with. Semantic information is available for versions 3.10 through 3.14. Version-sensitive rules still honor explicitly configured older Python versions using 3.10 type information.","category":"Python","subCategory":"General","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.coverage.reportPaths","name":"Path to coverage report(s)","description":"List of paths pointing to coverage reports. Ant patterns are accepted for relative path. The reports have to conform to the Cobertura XML format.","category":"Python","subCategory":"Tests and Coverage","defaultValue":"coverage-reports/*coverage-*.xml","multiValues":true,"options":[],"fields":[]},{"key":"sonar.python.coverage.reportPath","name":"Path to coverage report","description":"DEPRECATED : Use sonar.python.coverage.reportPaths instead. Path to a coverage report. Ant patterns are accepted for relative path. The report has to conform to the Cobertura XML format.","category":"Python","subCategory":"Tests and Coverage","options":[],"fields":[]},{"key":"sonar.python.xunit.skipDetails","name":"Skip the details when importing the Xunit reports","description":"When enabled the test execution statistics is provided only on project level. Use this mode when paths in report are not found. Disabled by default.","type":"BOOLEAN","category":"Python","subCategory":"Tests and Coverage","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.python.xunit.reportPath","name":"Path to xunit report(s)","description":"Path to the report of test execution, relative to project\u0027s root. Ant patterns are accepted. The reports have to conform to the junitreport XML format.","category":"Python","subCategory":"Tests and Coverage","defaultValue":"xunit-reports/xunit-result-*.xml","options":[],"fields":[]},{"key":"sonar.dre.r.activate","name":"Activate R analysis","description":"Activate analysis of R files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"R","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.r.cobertura.reportPaths","name":"Cobertura report paths","description":"List of paths to Cobertura coverage reports.","category":"R","subCategory":"Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.r.lintr.reportPaths","name":"lintr report paths","description":"List of paths to lintr GitLab-format finding reports.","category":"R","subCategory":"External Issues","multiValues":true,"options":[],"fields":[]},{"key":"sonar.r.file.suffixes","name":"R file suffixes","description":"List of suffixes of R files to index and consider for analyses.","category":"R","subCategory":"Analysis Scope","defaultValue":"R,r,Rmd,rmd","multiValues":true,"options":[],"fields":[]},{"key":"sonar.rpg.file.suffixes","name":"File Suffixes","description":"List of suffixes of RPG files to analyze.","category":"RPG","subCategory":"RPG","defaultValue":".rpg,.rpgle,.sqlrpgle,.RPG,.RPGLE,.SQLRPGLE","multiValues":true,"options":[],"fields":[]},{"key":"sonar.rpg.leftMarginWidth","name":"Left margin width","description":"Number of characters to the left of the standard 5-character comment block. In an RPG \"source physical file\" this will typically be 12, but it may not be present in your files depending on your extraction process.","type":"INTEGER","category":"RPG","subCategory":"RPG","defaultValue":"12","options":[],"fields":[]},{"key":"sonar.dre.ruby.activate","name":"Activate Ruby analysis","description":"Activate analysis of Ruby files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"Ruby","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.ruby.coverage.reportPaths","name":"Path to coverage report(s)","description":"Path to coverage report files (.resultset.json) generated by SimpleCov. The path may be absolute or relative to the project base directory and may include wildcards.","category":"Ruby","subCategory":"Test and Coverage","defaultValue":"coverage/.resultset.json","multiValues":true,"options":[],"fields":[]},{"key":"sonar.ruby.exclusions","name":"Ruby Exclusions","description":"List of file path patterns to be excluded from analysis of Ruby files.","category":"Ruby","subCategory":"General","defaultValue":"**/vendor/**","multiValues":true,"options":[],"fields":[]},{"key":"sonar.ruby.file.suffixes","name":"Ruby file suffixes","description":"List of suffixes of Ruby files to index and consider for analyses.","category":"Ruby","subCategory":"Analysis Scope","defaultValue":".rb","multiValues":true,"options":[],"fields":[]},{"key":"sonar.rust.cargo.manifestPaths","name":"Cargo manifest paths","description":"Paths (absolute or relative) to the project\u0027s \u003ccode\u003eCargo.toml\u003c/code\u003e manifests. Defaults to the manifest in the project\u0027s base directory.","category":"Rust","subCategory":"Analysis Scope","multiValues":true,"options":[],"fields":[]},{"key":"sonar.rust.clippyReport.reportPaths","name":"Clippy report paths","description":"Paths (absolute or relative) to JSON report files produced by \u003ccode\u003ecargo clippy --message-format\u003djson\u003c/code\u003e.","category":"Rust","subCategory":"Clippy","multiValues":true,"options":[],"fields":[]},{"key":"sonar.rust.cobertura.reportPaths","name":"Cobertura report paths","description":"Paths (absolute or relative) to Cobertura XML coverage report files.","category":"Rust","subCategory":"Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.rust.lcov.reportPaths","name":"LCOV report paths","description":"Paths (absolute or relative) to LCOV coverage report files.","category":"Rust","subCategory":"Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.rust.file.suffixes","name":"Rust file suffixes","description":"List of suffixes of Rust files to index and consider for analyses.","category":"Rust","subCategory":"Analysis Scope","defaultValue":".rs","multiValues":true,"options":[],"fields":[]},{"key":"sonar.security.config.roslyn.sonaranalyzer.security.cs","name":"C# custom configuration","description":"Custom configuration of the C# SAST engine. Details on the expected JSON format can be found on the \u0027Security Engine Custom Configuration\u0027 documentation page.","type":"JSON","category":"SAST Engine","subCategory":"Configuration","options":[],"fields":[]},{"key":"sonar.security.config.gosecurity","name":"Go custom configuration","description":"Custom configuration of the Go SAST engine. Details on the expected JSON format can be found on the \u0027Security Engine Custom Configuration\u0027 documentation page.","type":"JSON","category":"SAST Engine","subCategory":"Configuration","options":[],"fields":[]},{"key":"sonar.security.config.javasecurity","name":"Java custom configuration","description":"Custom configuration of the Java SAST engine. Details on the expected JSON format can be found on the \u0027Security Engine Custom Configuration\u0027 documentation page.","type":"JSON","category":"SAST Engine","subCategory":"Configuration","options":[],"fields":[]},{"key":"sonar.security.config.kotlinsecurity","name":"Kotlin custom configuration","description":"Custom configuration of the Kotlin SAST engine. Details on the expected JSON format can be found on the \u0027Security Engine Custom Configuration\u0027 documentation page.","type":"JSON","category":"SAST Engine","subCategory":"Configuration","options":[],"fields":[]},{"key":"sonar.security.config.phpsecurity","name":"PHP custom configuration","description":"Custom configuration of the PHP SAST engine. Details on the expected JSON format can be found on the \u0027Security Engine Custom Configuration\u0027 documentation page.","type":"JSON","category":"SAST Engine","subCategory":"Configuration","options":[],"fields":[]},{"key":"sonar.security.config.pythonsecurity","name":"Python custom configuration","description":"Custom configuration of the Python SAST engine. Details on the expected JSON format can be found on the \u0027Security Engine Custom Configuration\u0027 documentation page.","type":"JSON","category":"SAST Engine","subCategory":"Configuration","options":[],"fields":[]},{"key":"sonar.scala.file.suffixes","name":"File Suffixes","description":"List of suffixes for files to analyze.","category":"Scala","subCategory":"General","defaultValue":".scala","multiValues":true,"options":[],"fields":[]},{"key":"sonar.scala.coverage.reportPaths","name":"Path to Scoverage report","description":"Path to Scoverage report file(s) (scoverage.xml). Usually in target\\scala-X.X\\scoverage-report","category":"Scala","subCategory":"Test and Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.scala.scalatest.reportPaths","name":"ScalaTest Report Files","description":"Paths (absolute or relative) to ScalaTest XML report files or directories containing them.","category":"Scala","subCategory":"Test and Coverage","multiValues":true,"options":[],"fields":[]},{"key":"sonar.scm.disabled","name":"Disable the SCM Sensor","description":"Disable the retrieval of blame information from Source Control Manager","type":"BOOLEAN","category":"scm","subCategory":"scm","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.text.activate","name":"Activate Secrets Analysis","description":"Disabling Secrets analysis ensures that no files are analyzed for containing secrets.","type":"BOOLEAN","category":"Secrets","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.text.inclusions.activate","name":"Activate inclusion of custom file path patterns","description":"Disabling custom file path patterns ensures that only files associated to a language will get analyzed.","type":"BOOLEAN","category":"Secrets","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.text.excluded.file.suffixes","name":"(Deprecated) Additional binary file suffixes","description":"Deprecated. Please migrate excluded file suffixes to \u0027sonar.secrets.excluded.file.suffixes\u0027. Additional list of binary file suffixes that should not be analyzed with rules targeting text files.","category":"Secrets","subCategory":"General","multiValues":true,"options":[],"fields":[]},{"key":"sonar.secrets.demoMode","name":"Activate demo mode for secret detection","description":"When enabled, every non-binary file is analyzed, all filters that discard fake and placeholder secrets are disabled (enables \u0027sonar.secrets.disableKnownFakeSecretFilter\u0027), low-entropy secrets are reported (enables \u0027sonar.secrets.disableEntropyFilter\u0027), automatically detected test files are analyzed (enables \u0027sonar.secrets.disableTestFileDetection\u0027), and no file suffix is excluded from the secrets analysis (clears \u0027sonar.secrets.excluded.file.suffixes\u0027). This is a shortcut for setting all the individual properties named above. Intended for demos and evaluations: it raises findings that are known to be noisy, so it should not be used for production analyses.","type":"BOOLEAN","category":"Secrets","subCategory":"General","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.secrets.disableTestFileDetection","name":"Disable automatic test-file detection for secret detection","description":"When enabled, automatically detected test files are analyzed and findings are raised as low-confidence issues. This property has no effect on files explicitly classified as tests through the \"sonar.tests\" property.","type":"BOOLEAN","category":"Secrets","subCategory":"General","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.secrets.disableEntropyFilter","name":"Disable the entropy filter for secret detection","description":"When enabled, low-entropy matches that would normally be filtered out are raised as low-confidence issues. This helps surface potential fake or example secrets in benchmark or evaluation projects. Other post-filters are unaffected.","type":"BOOLEAN","category":"Secrets","subCategory":"General","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.secrets.disableKnownFakeSecretFilter","name":"Disable the known fake secret filter for secret detection","description":"When enabled, candidates matching a rule\u0027s curated fake-secret exclusion list (e.g. repeated characters, placeholder tokens, documentation example values) are raised as low-confidence issues. This helps surface potential fake or example secrets in benchmark or evaluation projects. Other post-filters are unaffected.","type":"BOOLEAN","category":"Secrets","subCategory":"General","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.text.inclusions","name":"List of file path patterns to include","description":"List of file path patterns that should be analyzed with rules targeting text files (ie. Secret rules, BIDI rule), in addition to those associated to a language. This is only applied when the scanner detects a git repository. ","category":"Secrets","subCategory":"General","defaultValue":"**/*.sh,**/*.bash,**/*.zsh,**/*.ksh,**/*.ps1,**/*.properties,**/*.conf,**/*.pem,**/*.config,**/*.env,.aws/config,**/*.key","multiValues":true,"options":[],"fields":[]},{"key":"sonar.secrets.excluded.file.suffixes","name":"Secrets analysis excluded file suffixes","description":"List of file suffixes that should not be analyzed with the secrets analysis.","category":"Secrets","subCategory":"General","defaultValue":".adoc,.md,.mdx,.dist,.html,.example,.sample,.template","multiValues":true,"options":[],"fields":[]},{"key":"sonar.auth.token.max.allowed.lifetime","name":"Maximum allowed lifetime for token","description":"Define the maximum lifetime that can be used for new tokens. Existing tokens are not impacted and may need to be manually revoked.","type":"SINGLE_SELECT_LIST","category":"security","subCategory":"security","defaultValue":"No expiration","options":["30 days","90 days","1 year","No expiration"],"fields":[]},{"key":"sonar.validateWebhooks","name":"Enable local webhooks validation","description":"Forcing local webhooks validation prevents the creation and triggering of local webhooks\u003cbr\u003e\u003cstrong\u003eDisabling this setting can expose the instance to security risks.\u003c/strong\u003e","type":"BOOLEAN","category":"security","subCategory":"security","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.allowPermissionManagementForProjectAdmins","name":"Enable permission management for project administrators","description":"Set if users with \u0027Administer\u0027 role in a project should be allowed to change project permissions. By default users with \u0027Administer\u0027 role are allowed to change both project configuration and project permissions.","type":"BOOLEAN","category":"security","subCategory":"security","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.enforceAzureOpenAiDomainValidation","name":"Enforce Azure OpenAI Endpoint Domain","description":"Ensures that Azure OpenAI Service endpoint URLs terminate exclusively with \u0027.openai.azure.com\u0027 for enhanced security. \u003cbr\u003e\u003cstrong\u003eDisabling this setting can expose the instance to security risks by allowing connections to potentially unauthorized services.\u003c/strong\u003e","type":"BOOLEAN","category":"security","subCategory":"security","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.forceAuthentication","name":"Force user authentication","description":"Forcing user authentication prevents anonymous users from accessing the SonarQube UI, or project data via the Web API. Some specific read-only Web APIs, including those required to prompt authentication, are still available anonymously.\u003cbr\u003e\u003cstrong\u003eDisabling this setting can expose the instance to security risks.\u003c/strong\u003e","type":"BOOLEAN","category":"security","subCategory":"security","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.security.secretSourceRedaction.enabled","name":"Mask detected secret values in source code","description":"When enabled, detected secret values are masked in source-code views and Web API responses that return source code. For findings where a safe location cannot be determined, the entire source of the affected file is masked.","type":"BOOLEAN","category":"security","subCategory":"security","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.shell.activate","name":"Activate shell analysis","description":"Activate analysis of shell files.","type":"BOOLEAN","category":"Shell","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.shell.file.suffixes","name":"Shell file suffixes","description":"List of suffixes of shell files to analyze. Only Bash and subsets are currently guaranteed to be supported.","category":"Shell","subCategory":"General","defaultValue":".sh,.bash","multiValues":true,"options":[],"fields":[]},{"key":"sonar.dre.postgres.activate","name":"Activate PostgreSQL analysis","description":"Activate analysis of PostgreSQL files using the Deterministic Rule Engine.","type":"BOOLEAN","category":"SQL","subCategory":"     General Settings","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.plsql.file.suffixes","name":"PL/SQL File Suffixes","description":"List of suffixes for files to analyze.","category":"SQL","subCategory":"    File Suffixes","defaultValue":"sql,pks,pkb","multiValues":true,"options":[],"fields":[]},{"key":"sonar.tsql.file.suffixes","name":"T-SQL File Suffixes","description":"List of suffixes for files to analyze.","category":"SQL","subCategory":"    File Suffixes","defaultValue":".tsql","multiValues":true,"options":[],"fields":[]},{"key":"sonar.postgres.file.suffixes","name":"PostgreSQL File Suffixes","description":"List of suffixes of PostgreSQL files to index and consider for analyses.","category":"SQL","subCategory":"    File Suffixes","defaultValue":"pgsql,psql","multiValues":true,"options":[],"fields":[]},{"key":"sonar.plsql.ignoreHeaderComments","name":"Ignore Header Comments","description":"If set to \"true\", the file headers (that are usually the same on each file: licensing information for example) are not considered as comments. Thus metrics such as \"Comment lines\" do not get incremented. If set to \"false\", those file headers are considered as comments and metrics such as \"Comment lines\" get incremented.","type":"BOOLEAN","category":"SQL","subCategory":"   PL/SQL","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.swift.coverage.reportPath","name":"Code coverage report","description":"DEPRECATED: Path of the coverage report generated from \"llvm-cov show\". This path can be either absolute or relative to the project directory.","category":"Swift","subCategory":"Swift","options":[],"fields":[]},{"key":"sonar.swift.coverage.reportPaths","name":"Code coverage reports","description":"Paths to the coverage reports generated from \"llvm-cov show\". These paths can be either absolute or relative to the project directory.","category":"Swift","subCategory":"Swift","multiValues":true,"options":[],"fields":[]},{"key":"sonar.swift.file.suffixes","name":"File Suffixes","description":"List of suffixes for files to analyze.","category":"Swift","subCategory":"Swift","defaultValue":".swift","multiValues":true,"options":[],"fields":[]},{"key":"sonar.technicalDebt.developmentCost","name":"Development cost","description":"Cost to develop one line of code (LOC). Example: if the cost to develop 1 LOC has been estimated at 30 minutes, then the value of this property would be 30.","category":"technicalDebt","subCategory":"technicalDebt","defaultValue":"30","options":[],"fields":[],"deprecatedKey":"workUnitsBySizePoint"},{"key":"sonar.technicalDebt.ratingGrid","name":"Maintainability rating grid","description":"Maintainability ratings range from A (very good) to E (very bad). The rating is determined by the value of the Technical Debt Ratio, which compares the technical debt on a project to the cost it would take to rewrite the code from scratch. The default values for A through D are 0.05,0.1,0.2,0.5. Anything over 0.5 is an E. Example: assuming the development cost is 30 minutes, a project with a technical debt of 24,000 minutes for 2,500 LOC will have a technical debt ratio of 24000/(30 * 2,500) \u003d 0.32. That yields a maintainability rating of D.","category":"technicalDebt","subCategory":"technicalDebt","defaultValue":"0.05,0.1,0.2,0.5","options":[],"fields":[],"deprecatedKey":"ratingGrid"},{"key":"sonar.terraform.activate","name":"Activate Terraform Analysis","description":"Disabling Terraform analysis ensures that no Terraform files are parsed, highlighted and analyzed, and no IaC analysis results are included in the quality gate.","type":"BOOLEAN","category":"Terraform","subCategory":"General","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.terraform.file.suffixes","name":"File Suffixes","description":"List of suffixes of Terraform files to analyze.","category":"Terraform","subCategory":"General","defaultValue":".tf","multiValues":true,"options":[],"fields":[]},{"key":"sonar.terraform.provider.aws.version","name":"AWS Provider Version","description":"Version of the AWS provider of lifecycle management of AWS resources. Use semantic versioning format like `3.4`, `4.17.1` or `4`","category":"Terraform","subCategory":"Provider Versions","options":[],"fields":[]},{"key":"sonar.terraform.provider.azure.version","name":"Azure Provider Version","description":"Version of the Azure Resource Manager provider of lifecycle management of Microsoft Azure resources. Use semantic versioning format like `3.4`, `4.17.1` or `4`","category":"Terraform","subCategory":"Provider Versions","options":[],"fields":[]},{"key":"sonar.vbnet.analyzeGeneratedCode","name":"Analyze generated code","description":"If set to \"true\", the files containing generated code are analyzed. If set to \"false\", the files containing generated code are ignored.","type":"BOOLEAN","category":"VB.NET","subCategory":"VB.NET","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.vbnet.file.suffixes","name":"File suffixes","description":"List of suffixes for files to analyze.","category":"VB.NET","subCategory":"VB.NET","defaultValue":".vb","multiValues":true,"options":[],"fields":[]},{"key":"sonar.vbnet.ignoreHeaderComments","name":"Ignore header comments","description":"If set to \"true\", the file headers (that are usually the same on each file: licensing information for example) are not considered as comments. Thus metrics such as \"Comment lines\" do not get incremented. If set to \"false\", those file headers are considered as comments and metrics such as \"Comment lines\" get incremented.","type":"BOOLEAN","category":"VB.NET","subCategory":"VB.NET","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.vb.file.suffixes","name":"File Suffixes","description":"List of suffixes for Visual Basic files to analyze. To not change the defaults, leave the list empty.","category":"Visual Basic","subCategory":"Visual Basic","defaultValue":".bas,.frm,.ctl","multiValues":true,"options":[],"fields":[]},{"key":"sonar.vb.ignoreHeaderComments","name":"Ignore header comments","description":"Set to \u0027true\u0027 to enable, or \u0027false\u0027 to disable.","type":"BOOLEAN","category":"Visual Basic","subCategory":"Visual Basic","defaultValue":"true","options":[],"fields":[]},{"key":"sonar.xml.file.suffixes","name":"File suffixes","description":"List of suffixes for XML files to analyze.","category":"XML","subCategory":"XML","defaultValue":".xml,.xsd,.xsl,.config","multiValues":true,"options":[],"fields":[]},{"key":"sonar.yaml.activate","name":"Activate YAML file analysis","description":"Activate analysis of all YAML files.","type":"BOOLEAN","category":"YAML","subCategory":"General","defaultValue":"false","options":[],"fields":[]},{"key":"sonar.yaml.exclusions","name":"File exclusions for YAML analysis","description":"List of YAML file name patterns to be excluded from analysis.","category":"YAML","subCategory":"General","defaultValue":"**/pnpm-lock.yaml,**/pubspec.yaml,**/pubspec_overrides.yaml,**/conda-lock.yml,**/*.conda-lock.yml,**/conda-*.lock.yml","multiValues":true,"options":[],"fields":[]},{"key":"sonar.yaml.file.suffixes","name":"File Suffixes","description":"List of suffixes of YAML files to be indexed.","category":"YAML","subCategory":"General","defaultValue":".yaml,.yml","multiValues":true,"options":[],"fields":[]}]}