CloudFormation

Language-specific information about the way that SonarQube Cloud supports analysis of CloudFormation.

Language-specific properties

To discover and update the CloudFormation-specific properties, navigate to Your Project > Administration > General Settings > Languages > CloudFormation. See Configuration overview for more information about setting properties.

Supported versions, formats and providers

• CloudFormation with AWSTemplateFormatVersion 2010-09-09 (YAML and JSON)

In-line suppression of issues

Adding the NOSONAR comment on the line will suppress all issues on that line:

• NOSONAR can be placed anywhere in the comment.
• The comment check is case-sensitive.

Rather than relying on this method, we suggest refining your analysis scope to avoid creating major gaps in your code review. Because the NOSONAR comment silences all current and future issues on a line without regard for their severity, it is an imprecise tool. Even if you only intend to hide a minor stylistic point, you could unintentionally obscure a serious security flaw.

External reports

For CloudFormation you can import cfn-lint reports. See Your Project > Administration > General Settings > External Analyzers > CloudFormation to specify the file path.

Related Pages

• Analysis parameters

• Analysis scope