diff --git a/sonar-project.properties b/sonar-project.properties new file mode 100644 index 0000000000..3a5f750714 --- /dev/null +++ b/sonar-project.properties @@ -0,0 +1,13 @@ +# SonarCloud Configuration for Aletheia + +sonar.projectKey=cheir-mneme_aletheia +sonar.organization=cheir-mneme + +# Exclude false positive log injection warnings +# SanitizeForLog() extension method sanitizes all user input before logging +# but SonarCloud doesn't recognize custom sanitizers +sonar.issue.ignore.multicriteria=e1 + +# S5145: Log injection - false positive, using SanitizeForLog() sanitizer +sonar.issue.ignore.multicriteria.e1.ruleKey=roslyn.sonaranalyzer.security.cs:S5145 +sonar.issue.ignore.multicriteria.e1.resourceKey=**/*.cs