SonarQube for IDE

Compatible with IntelliJ IDEA (Ultimate, Community), Android Studio and 10 more
Screenshot 2

SonarQube for IDE (formerly SonarLint) by Sonar is a free IDE extension to find and fix coding issues in real-time, flagging issues as you code, just like a spell-checker. More than a linter, it also delivers rich contextual guidance to help developers understand why there is an issue, assess the risk and educate them on how to fix it. This helps improve their skills, enhance their productivity, and take ownership of their code, taking linting to a different level.


When paired with SonarQube Server or SonarQube Cloud in Connected Mode, SonarQube for IDE forms a powerful end-to-end code quality platform to enrich the CI/CD pipeline, ensuring any code edits or additions are clean. In Connected Mode, your team can share common language rulesets, project analysis settings and more.


SonarQube for IDE is a powerful open-source tool for developers of all experience and skill levels, empowering them to deliver Clean Code - code fit for development and production. An essential linting tool for every developer.


SonarQube for IDE integrates with most JetBrains IDEs including IntelliJ IDEA, CLion, GoLand, WebStorm, PHPStorm, PyCharm, Rider, Aqua, AppCode, Android Studio & RubyMine. Supported languages include C, C++, Java, Go, JavaScript, TypeScript, Python, C#, Kotlin, Ruby, HTML, CSS, PHP & PL/SQL. The full list of supported languages and rules is available in our docs.



Get started by checking the Requirements and Installation pages.

What’s New

  • 10.16.1 - Fix of an internal compatibility issue with SonarQube Server
  • 10.16 - Support analysis of Ansible files. Improve performance by analyzing focused files only. Fixed an issue where SonarQube for IDE would appear as a Java program in the menu bar on macOS. Fixed a noisy error that could happen when opening a project.
  • 10.15 - 1 new QuickFix for Java. Fix of a performance regression on Python. Fix a noisy log error. Avoid symbol errors on CLion. Bug fixes, fewer FPs and improvements for many languages.
  • 10.14.1 - Fix unwanted loading bar appearance for computing branch information. Fix connection issue for SonarQube Server versions 10.0 - 10.4.
  • 10.14 - Support analysis of Jupyter Notebook files. Increase JS/TS analysis speed and fix an issue where many temporary files would be created. Drop support for username/password authentication.
  • 10.13.1 - Include a transparent and dark version of the plugin icon. Fix a noisy log error about a missing ProgressIndicator. Improve the tool window icon behavior to reflect the current number of issues in the file.
  • 10.13 - SonarLint becomes SonarQube for IDE. Support for Standard and MQR mode. Fix an issue where the disk space used would grow indefinitely. Avoid an issue where the file system cache would run out of memory. Multiple performance improvements to the JS/TS analyzer. 7 new C++ rules and 1 new Security Hotspot C++ rule. Improve the tolerance to syntax errors when parsing Java switch expressions. Detection of secrets in PHP and C#. Support of Python 3.13. Deprecate the usage of Node.js 18 for JS/TS analysis. 1 new rule for Java. Support of more Java rules on test code. Bug fixes, fewer FPs and improvements for many languages.
  • 10.12 - Support of Java 22 analysis. Automatically analyze opened files on remote environments. 2 new quick fixes for C++. Support for WindRiver GNU C++ compiler for arm. Improve analysis triggering performance. Many fixes on various graphical elements. Bug fixes, fewer FPs and improvements for many languages.
  • 10.11.1 - Allow to open AI fix suggestions coming from SonarQube or SonarCloud. Avoid a rare issue when VFS is closed.
  • 10.11 - Optimize the triggering of analysis and automatically cancel redundant ones. Avoid an error related to the .gitignore file. Fix an issue where a custom Node.js path would not be considered. Optimize SonarLint initialization performance and reduce the file system cache usage. Improve error feedback with Connected Mode. 1 new PHP rule. 7 new Python rules related to PyTorch. Bug fixes, fewer FPs and improvements for many languages.
  • 10.10 - Improve SonarLint performance and optimize memory usage. Refactor thread management to avoid UI freezes. Avoid errors of type 'No file to analyze'. Support detection of Micronaut configuration issues. 6 new JS/TS rules. Introduce new INFO and BLOCKER severities. Improve UI feedback when lacking permission with SonarQube or SonarCloud. Bug fixes, fewer FPs and improvements for many languages.
  • 10.9 - Support analysis of Helm files. Improve analysis consistency on Rider. 7 new C++23 rules and C++23 support. Bug fixes, fewer FPs and improvements for many languages.
  • 10.8.1 - Correctly display the current file analysis results on dev containers. Fix an issue where triggering a report analysis would disappear. Fix a problem where issues from another project would appear in the report.
  • 10.8 - Handle "Open in IDE" requests from SonarCloud. Detection of 34 new secrets. 11 new rules for Kubernetes. 20 new Java rules enabled on test code. Fix an issue in Rider where analysis would never finish. Bug fixes, fewer FPs and improvements for many languages.
  • 10.7 - Allow users to focus on new code without connected mode. Help users to generate a token when creating a new connection to SonarCloud. Support for more complex rules in Python and Java. Support for multiple project-level issues on C#. Support for C/C++ analysis from Linux ARM. Fix an issue in Rider that prevented file analysis. Fix an issue where files with special characters would not get analyzed. Avoid an issue in CLion when WSL is not supported. Bug fixes, fewer FPs and improvements for many languages.
  • 10.6.2 - Fix an issue on Windows preventing analysis from running in CLion. Fix an issue in Rider when no git repositories are found. Improve performance and avoid running unnecessary analysis.
  • 10.6.1 - Fix an issue preventing analysis from running when multiple projects are opened simultaneously.
  • 10.6 - Support of CLion Nova. Deprecate authentication with login/password. Improve the shared connected mode settings compatibility on C# projects with Visual Studio and VS Code. 5 new rules for Python. Support for Spring configuration files. Support of 21 Java rules on test sources. 7 new rules for C#. 1 new rule for ASP.NET. Bug fixes, fewer FPs and improvements for many languages.
  • 10.5 - Allow users to share connected mode settings among contributors. Remove support for Node.js 16 (18 required). 21 new rules for Java and improved support for Spring. 14 new rules for Python. Support analysis of C++23. 1 new rule for token detection. 18 new rules for C#. 4 new accessibility rules for JS/TS. 6 new accessibility rules for HTML. Bug fixes, fewer FPs and improvements for many languages. Various bug fixes and performance improvements.
  • 10.4.2 - Fix an issue where rule configuration is not loaded at startup. Stop the creation of configuration files at module level for storing module IDs. Improve performance during synchronization on large projects. Various bug fixes.
  • 10.4.1 - Fix various errors when starting the SonarLint service. Fix an error when using a proxy.
  • 10.4 - SonarLint now runs in a separate process. Support of Java 21 and 2 new Java rules. 17 new accessibility rules for HTML. 2 new C++ rules. 2 new quick fixes for Python. 1 new JS/TS rule. Various UI fixes and improvements. Bug fixes, fewer FPs and improvements for many languages.
  • 10.3 - Allow detection of custom secrets in connected mode starting from SonarQube 10.4. Set up a connection in one click starting from SonarQube 10.4 when using the Open in IDE feature. Fix memory leaks and UI freezes. Support Jakarta namespace. 9 new C++ MISRA 2023 rules. Remove support for Node.js 14 and deprecate support for Node.js 16 and Node.js 17. Support TypeScript 5.3. 5 new rules for JavaScript. 8 new rules for Kubernetes. Bug fixes, fewer FPs and improvements for many languages.
  • 10.2.1 - Fix an error when using Rider or CLion in connected mode with SonarCloud.
  • 10.2 - Support for Gradle Kotlin DSL and C# 12. 5 new Spring Boot rules. 1 new rule for Python. Bug fixes, fewer FPs and improvements for many languages.
  • 10.1.1 - Fix a potential deadlock and UI freeze.
  • 10.1 - 9 new Java rules related to Spring Boot, 1 new quick fix. 17 new accessibility rules for JSX. 6 new Kotlin rules. Support for Python 3.12 syntax, add 5 related rules, add 3 new Security Hotspots. 2 new C++ MISRA 2023 rules, support for Docker toolchain in CLion. Support for .NET 8 in Rider. Bug fixes, fewer FPs and improvements for many languages.
  • 10.0.1 - Fix an error when opening an issue from SonarQube. Fix potential UI-freeze.
  • 10.0 - Raise minimal supported version to 2022.3.1 and Java 17. Allow to reopen taint vulnerabilities. Handle "Open in IDE" requests from SonarQube. Synchronize issues and Security Hotspots in real-time from SonarCloud. 5 new rules for Python. 6 new rules for Java. 29 new rules for JavaScript. Bug fixes, fewer FPs and improvements for many languages.
  • 9.1 - Lets users focus on new code in connected mode. Support of quick fixes preview. 1 new quick fix for JS/TS. 2 new C++ MISRA 2023 rules. Detection of 42 new secrets. 8 new rules and 3 new quick fixes for Python. 16 new rules for Docker. Support for Ruby 3.2.0. Bug fixes, fewer FPs and improvements for many languages.
  • 9.0 - Support Clean Code attributes and software qualities. Allow the reopening of resolved issues and add ability to resolve issues not yet known by SonarQube (version 10.2+). Support of PHP 8.3. 9 new rules for Python. 15 new rules for JS/TS. Detection of 50 new patterns and 22 new types for secrets. Support of Bicep in Azure. 5 new rules for Azure Resource Manager templates. Bug fixes, fewer FPs and improvements for many languages.
  • 8.5.1 - Fix an error when creating or updating a connection to SonarCloud. Fix SSL issues related to our HTTP client. Fix an error when using a proxy.
  • 8.5 - Support PL/SQL analysis in connected mode when 'Database Tools and SQL' plugin is enabled. 43 new MISRA rules for C++. 12 new rules for CloudFormation, Docker, Kubernetes and Terraform. 9 new rules and one quick fix for C# in Rider. Bug fixes, fewer FPs and improvements for many languages.
  • 8.4 - Allow marking issues existing on SonarQube/SonarCloud as resolved. Support near real-time synchronization of Security Hotspots with SonarQube. Support syntax highlighting in rule configuration. 5 new rules and 1 quick fix for JavaScript. 2 new rules for C++. 1 new rule for C# and support .NET 7 in Rider. Bug fixes, fewer FPs and improvements for many languages.
  • 8.3 - Allow changing status of Security Hotspots. Support Security Hotspots when connected to SonarCloud. Support analysis of Go not only in GoLand but also when using the Go plugin in IntelliJ IDEA Ultimate. 17 new rules for JavaScript. 6 new rules for PHP. 10 new rules, 1 new quick fix for Python. 9 new rules for Kotlin. 11 new rules for C# in Rider. Bug fixes, fewer FPs and improvements for many languages.
  • 8.2 - Support syntax highlighting and diff view for code examples. Add support for CloudFormation, Docker, Kubernetes and Terraform. 3 new rules for Java. 8 new rules for JavaScript. 2 new rules for C# in Rider. 9 new rules for Kotlin. 11 new rules, 3 new quick fixes for Python. Bug fixes, fewer FPs and improvements for many languages.
  • 8.1 - Support analysis of Go in GoLand. Support for tiarmclang compiler, Kotlin 1.8 and IPython syntax. 6 new rules for C# in Rider. Bug fixes, fewer FPs and improvements for many languages.
  • 8.0 - Raise minimal supported version to 2021.3. Report Security Hotspots locally when connected to SonarQube 9.7+. Support of JavaScript analysis in HTML files. Support for clang-cl and Microchip compilers. New quick fixes for 11 Java rules. New quick fix for a C++ rule. New quick fixes for 17 Python rules. 6 new rules for C# in Rider. Bug fixes, fewer FPs and improvements for many languages.
  • 7.4 - Display Clean Code principles in rule descriptions. 13 new rules around std::format for C++. 1 new rule for Java. Bug fixes, fewer FPs and improvements for many languages.
  • 7.3 - Improved display of rule descriptions. New react performance rules. Analyze CSS files. New Kotlin rules. 6 new C++20 rules. Support Python 3.11. Analyze JS, TS, CSS and HTML in Rider. 1 new rule for C# in Rider. Many rules improvements.
  • 7.2.1 - Fix an error when selecting issues or taint vulnerabilities in the tool window in 2022.3.
  • 7.2 - Help users to generate a token when creating a new connection. Add quick fixes in Rider for C#. 2 new rules, 4 new quick fixes for Python. 1 new rule for credentials detection for Java. Support analysis of JS in YAML files. New AWS CDK rules. Bug fixes, fewer FPs and improvements for many languages.
  • 7.1.1 - Fix security issue when opening a hotspot from SonarQube.
  • 7.1 - Support analysis of Kotlin 1.7.10. 8 new rules around unit tests for Python. Support analysis of PHP 8.2. Support analysis of TypeScript 4.8. Remove support for Node.JS 12 and deprecate support for Node.JS 14. Add 7 rules for React. Bug fixes, fewer FPs and improvements for many languages.
  • 7.0 - Reworked connected mode storage. Auto-sync of issues with SonarQube 9.6+.
  • 6.8 - Use embedded JS/TS/HTML/Kotlin/Ruby/XML analyzer even in connected mode. Introduce quick fixes for 7 Python rules. 15 new rules for Java (6 for regular expressions, 7 for AWS Cloud functions). 5 new rules for JS/TS. Add support for TypeScript 4.7. 3 new rules for C/C++. Add support for Ruby 3.1. New and improved C# rules. Support for C# 10. Bug fixes, fewer FPs and improvements for many languages.
  • 6.7 - Quick fixes for 3 C/C++ and 30 JS/TS rules. 17 new rules for Python (8 for regular expressions). Support for TypeScript 4.6. Activate JS rule S1172 by default. Activate C# rule S2222 by default. Remove legacy C/C++ rule keys. Bug fixes, fewer FPs and improvements for many languages.
  • 6.6 - Synchronize issues and taint vulnerabilities from the appropriate branch in connected mode. Subscribe for server events to update active rules. Quick fixes for 15 C/C++ and 23 JS/TS rules. Support TypeScript 4.5. Drop support for Node 10. One more rule for C#. Performance improvements in Rider.
  • 6.5.1 - Fix error message at startup.
  • 6.5 - Deprecation of Node.js < 12.22 for JS/TS analyzes. Embed the XML analyzer. 5 new rules for Java. 9 new rules for PHP around regexes. Bug fixes, fewer FPs and improvements for many languages
  • 6.4.3 - Fewer false-negatives and false-positives for C/C++.
  • 6.4.2 - Fix potential UI-freeze when loading/unloading modules.
  • 6.4.1 - Fix error in connected mode if custom plugin have markdown rule description.
  • 6.4 - Automatically synchronize rules and settings from server. New JS/TS rules for tests. Support PHP 8.1. New rules for regexp in Python. Support Python 3.10. New rules for Kotlin. Support Kotlin 1.6. Support Ruby 3.0.3. 10 new rules for C++20 coroutines, quick fixes for 3 more C++ rules. Support .NET 6 in Rider. Many rules improvements.
  • 6.3.1 - Fix connected mode in Rider.
  • 6.3 - Quick fixes for 43 C/C++ rules.
  • 6.2 - 9 new rules for regular expressions in PHP. 1 new vulnerability detection rule for Android. Fixes for HTTP protocol issues and UI improvements.
  • 6.1 - Allow binding individual modules or attached projects to SonarQube/SonarCloud. New rules for regular expressions in PHP, JS and TS. Wordpress misconfiguration rules in PHP. 7 new rules for C++20. Many rules improvements.
  • 6.0 - Change plugin JVM runtime requirement to 11+
  • 5.3 - Introduce quick fixes for 40 Java rules. Remote and WSL toolchains support for CLion. 1 new rule for Java, 4 for C/C++, 5 for secrets detection. Rules improvements for Java and C++.
  • 5.2 - New Java 16 specific rules. Rules improvements for PHP. Performance improvement for Python analysis. Many bug fixes and small improvements.
  • 5.1 - Support TS 4.3 and Vue.js. MSVC support for CLion. Rules improvements for Java, Kotlin, C/C++ and JS/TS.
  • 5.0.1 - Fix exceptions in registration of application listeners and during analysis on older versions of the IntelliJ platform. Fix UI freezes.
  • 5.0 - Improve precision of Python analyzes thanks to cross-module resolution of symbols. Drop support of SonarQube < 7.9 for connected mode. Fixed false-positives and false-negatives in C/C++ analysis. Bug fixes and improvements.
  • 4.16 - 3 new rules for C++20. Improved JS/TS rules. Fixed false positive in HTML analysis. Improved PHP rules.
  • 4.15 - Support analysis of C/C++ in CLion. Support TypeScript 4.1 and 4.2. Rules improvements for Java and Python. Minimal supported version is 2019.3.
  • 4.14.2 - Fix exceptions thrown during analysis and work around an issue with latest EAP.
  • 4.14.1 - Fix an error occurring after each analysis. Fix the regression on UI responsiveness.
  • 4.14 - New rules for regexp in Java, Java 15 support. All JS rules now based on the TypeScript parser. Rules improvements for PHP and Python. Support for Ruby 3.0.0. Support of Python 3.9. Investigate taint vulnerabilities detected by SonarQube 8.6+ or SonarCloud.
  • 4.13 - New or improved rules for access control or authentication in Java. Security rules for JS/TS. Support of PHP 8, improved rules. Updated Kotlin and Ruby analyzers, supporting latest language features and improved rules. Updated HTML analyzer with improved rules. Reworked server notifications. Review a Security Hotspot within its context.
  • 4.12 - Lots of new rules for Java (including test code), support analysis of Java 14. 20 new rules for PHP, including 13 related to unit tests. 2 new rules for JavaScript. 3 new rules for Python. Bug fixes and improvements.
  • 4.11 - Improve issues, flows and secondary locations navigation and highlighting. Show secondary location indexes in the editor. Add 'Show rule description' and 'Show data flow/issue locations' contextual actions. Relax search criteria in rule configuration filter. Show effective rule parameter in the rule description panel. Bug fixes and improvements.
  • 4.10 - Fix duplicated annotations for PHP files. Display rule severity defined in the quality profile in connected mode. Fix analysis failure with JSP files. Bug fixes and improvements for JS files. 4 new rules (3 security related), bug fixes and improvements for PHP files.
  • 4.9 - Many new rules about JUnit and AssertJ for Java test files. 10 new rules for PHP. 22 new rules for Python and support of Typeshed packages. Preparatory changes for dynamic plugin installation.
  • 4.8 - Configure rule parameters in IDE settings. Performance improvement and fewer false positives for PHP. 4 new vulnerability detection rules for Python.
  • 4.7 - 2 new rules and performance improvements for Java. 2 new rules for Python.
  • 4.6 - Enable analysis of TypeScript. 27 new rules for Python. Support for Python 3.8.
  • 4.5.1 - Fix two regressions causing exception during analysis.
  • 4.5 - 3 new rules and engine improvements for Python. New engine for Java, with support for Java 13 preview features.
  • 4.4 - Ensure compatibility with JetBrains 2020.x release train. 22 new rules and engine improvements for Python. Support for PHP 7.4. New engine for JavaScript, 8 new rules.
  • 4.3 - Supports SonarJS 6.x in connected mode. Updated issue type icons.
  • 4.2 - Analyze HTML in Vue.js single file components. 8 new HTML rules. Support 'Ignore Issues on Files' and 'Ignore Issues in Blocks' in connected mode.
  • 4.1.1 - Fix regression on quality profile in connected mode
  • 4.1 - Enable analysis of HTML. Add support of XML in connected mode. 10 new Java rules.
  • 4.0.2 - Fix error on startup registering actions affecting all IDEs other than IntelliJ
  • 4.0.1 - Fix duplicated highlighting in WebStorm and connection to a server with more than 10k rules
  • 4.0 - Improved matching of issues with SonarQube
  • 3.5.1 - Fixed error with read access and repeated annotations
  • 3.5 - Manage rules when not connected to SonarQube or SonarCloud
  • 3.4.2 - Fix a regression in the SonarQube server configuration wizard
  • 3.4.1 - Fix of several bugs: binding to SonarCloud organizations, support of Java 10, rendering of rule descriptions
  • 3.4 - Update of embedded code analyzers. Fix analysis of files located outside of the project base directory
  • 3.3 - Numerous improvements and UX enhancements.
  • 3.2.1 - Bug fix for concurrent modification when all files of a module are excluded by server configuration
  • 3.2 - Support excluding files from the automatic analysis
  • 3.1 - Various minor improvements and bug fixes. Updated code analyzers.
  • 3.0 - Avoid saving files when possible. Improve support of cancellation
  • 2.10 - Support of SonarQube organizations
  • 2.9 - New code analyzers included in standalone mode. Collection of usage statistics
  • 2.8 - Analyze all files in project. New icons for issue types
  • 2.7 - Display of secondary locations of issues
  • 2.6 - Support of SSL certificates configured in IntelliJ
  • 2.5 - Analysis of VCS changed files and notifications about binding update
  • 2.4.3 - Bug fix for multi-module projects on Windows
  • 2.4.2 - Fix resolved issues on windows and authentication
  • 2.4.1 - Bug fix of Javascript in standalone mode.
  • 2.4 - Hide issues that are resolved in SonarQube. Numerous bug fixes.
  • 2.3.2 - Fix configuration of automatic trigger of analysis
  • 2.3.1 - Bug fix for analysis configuration and performance improvements
  • 2.3 - Support of exclusions in connected mode; Numerous bug fixes. Java 8 is now required to run SonarLint.
  • 2.2 - Support of SonarQube LTS (4.5) and commercial plugins
  • 2.1.1 - Bug fix for PHPStorm
  • 2.1 - Various improvements and bug fixes
  • 2.0.2 - Bug fix SLI-73
  • 2.0.1 - Bug fixes
  • 2.0 - Connect to a SonarQube server;
  • 1.5 - Display SonarLint markers age;
  • 1.4 - No internet required; Several bug fixes;
  • 1.3 - Issues views; UI improvements;
  • 1.2 - Automatic trigger of analysis; "NO SONAR" quick fix; configurable highlighting of issues;
  • 1.1 - More precise issue location; trigger of analysis changed to on demand only; improved SonarLint console;
  • 1.0 - On the fly SonarLint inspection
Feb 05, 2025
Version 10.16.1.80464

Getting Started


Getting started is easy:
Once Install is complete from the marketplace, you must select Restart IDE and confirm the Restart to activate the new plugin.

Once installed you'll have SonarQube for IDE enabled by default. The analysis is triggered on the fly while coding or manually by actions, which can be directly accessed with key bindings, editor popup menu or in the SonarQube for IDE console. If you find any problem using the plugin, please report it in the forum so that we have a chance to fix it.

Rating & Reviews

3.6
135 Ratings (9,270,926 Downloads)
5
4
3
2
1

Parker Mauney

Yesterday

This plugin was great long ago, then it gradually became more and more of a burden and less useful as time went on. Now it pops up SonarQube advertisements upon install, so I'm out.

0

Carlos Pinheiro

1 week ago

This plugin is useful but is really slow checking each file. I had to deactivate it.

Also, it should have an option to only check changed files, not every open unchanged file.

0

fe-sa

27.01.2025

The plugin after sevral updates has stops work properly ( the project is currently binding to local sonarQube server). I've tried to:

  • change config to bind other project,
  • reinstalling plugin

but it keeps showing error: [2025-01-27T17:18:02.021] [SonarLint Local Storage Synchronizer] ERROR sonarlint - Error during synchronization java.lang.IllegalStateException: Duplicate key format (attempted merging values ^(@{0,2}[\da-z_]+[!?=]?)|([*+-/%=!><~]+)|([]=?)$ and ^(@{0,2}[\da-z_]+[!?=]?)|([*+-/%=!><~]+)|([]=?)$)

0

Additional Information

Vendor:
SonarSource(Trader)
Copyright:
Plugin ID:
org.sonarlint.idea