SonarLint and NOSONAR feature

[Laurent Tourreau]

Hi guys

We are very amazed that you introduced the "Add NOSONAR" ability in SonarLint 1.2 since managing the false positive stuff should be done through "false/postive" or "Won't fix" feature on server side by the project admin as you recommended it some time ago in the forum.

Adding NOSONAR tags comment pollute the code and any lazy developer could be tempted to deliberately bypass issues on his code (abuse).

In my company, we have forbidden NOSONAR tags (we have enabled NOSONAR rule detection) and we prefer to have more control of false/postive through the UI feature on the server by the project admin. It forces the dialog between the developer and the project admin.

On the futur, is it possible having an option to disable "Add NOSONAR" command on SonarLint to avoid the use of this feature?

Regards

Laurent TOURREAU

[Duarte Meneses]

Hi Laurent,

Adding NOSONAR is a solution to locally ignore an issue when using SonarLint unattached to your own instance of SonarQube Server (which is the only supported mode at the moment), and still be able to share it with other developers with the code.
With SonarLint 2, it will be possible to connect SonarLint to a particular server and mark issues on the server side.

In your case, I suggest you enforce the rule "squid:NoSonar" in your company's server so that developers using it break your quality gate.

[Laurent Tourreau]

Thanks Duarte.
We will wait for SonarLint 2.

Regards

Laurent TOURREAU