Hash without salt: no override

[stefandrissen]

Security rule Hash without salt does not provide an override.

def var mp    as memptr.
def var chash as char.

chash = hex-encode( message-digest( 'sha-512', mp ) ).

message chash view-as alert-box.

The hash is used to verify that file has not been tampered with, I do not think that salt has a place here.

[gquerret]

Security rules don't have an override. You can flag the issue as a false positive in the SonarQube UI.

[stefandrissen]

I thought that the issue was persisting in PDSOE even though I had accepted the issue in SonarQube UI, but it seems to now have disappeared.

Update: when I add or remove a line in the source file the accepted security issues no longer match, resulting in issue being flagged in editor -> a suppress option really makes sense

[gquerret]

Update: when I add or remove a line in the source file the accepted security issues no longer match, resulting in issue being flagged in editor -> a suppress option really makes sense

In SonarLint or in SonarQube ? However that should be handled in both cases. Using Git, or a different code repository?

[stefandrissen]

In SonarLint or in SonarQube ? However that should be handled in both cases. Using Git, or a different code repository?

In the PDSOE editor which I assume is SonarLint talking to SonarQube, in SonarQube the issues were accepted.

Insert two lines and issue is flagged (No salt in hash):

When I insert another line, the issue disappears:

Insert another line and it reappears:

But... looking at the SonarQube console in PDSOE it is throwing a Marker id 39756 not found error every other inserted line:

Starting analysis with configuration: [
  baseDir: C:\ef\7.38\dev\common
  extraProperties: {sonar.updatecenter.cache.ttl=3600000, sonar.auth.bitbucket.allowUsersToSignUp=true, sonar.cs.ignoreHeaderComments=true, sonar.typescript.file.suffixes=.ts,.tsx,.cts,.mts, sonar.auth.github.enabled=false, sonar.python.coverage.reportPaths=coverage-reports/*coverage-*.xml, sonar.text.activate=true, provisioning.gitlab.enabled=false, sonar.go.file.suffixes=.go, sonar.cs.analyzeRazorCode=true, sonar.auth.saml.applicationId=sonarqube, sonar.cs.analyzer.dotnet.analyzerId=SonarAnalyzer.CSharp, sonar.python.xunit.skipDetails=false, sonar.ipynb.file.suffixes=ipynb, sonar.dbcleaner.weeksBeforeKeepingOnlyAnalysesWithVersion=104, sonar.qualitygate.ignoreSmallChanges=true, sonar.auth.saml.signature.enabled=false, sonar.go.exclusions=**/vendor/**, sonar.php.exclusions=**/vendor/**, sonar.terraform.file.suffixes=.tf, sonar.forceAuthentication=true, sonar.notifications.delay=60, sonar.vbnet.roslyn.ignoreIssues=false, sonar.flex.file.suffixes=as, sonar.multi-quality-mode.enabled=true, sonar.oe.rcode.skip=false, sonar.filesize.limit=20, sonar.auth.gitlab.groupsSync=false, sonar.auth.github.apiUrl=https://api.github.com/, sonar.ruby.file.suffixes=.rb, sonaranalyzer-cs.ruleNamespace=SonarAnalyzer.CSharp, sonar.auth.github.allowUsersToSignUp=true, sonar.azureresourcemanager.file.identifier=https://schema.management.azure.com/schemas/,http://schema.management.azure.com/schemas/, sonar.cs.analyzeGeneratedCode=false, sonar.oe.binaries=C:\ef\7.38\oe12.8\build\common, sonar.python.xunit.reportPath=xunit-reports/xunit-result-*.xml, sonar.java.jvmframeworkconfig.file.patterns=**/src/main/resources/**/*app*.properties,**/src/main/resources/**/*app*.yaml,**/src/main/resources/**/*app*.yml, sonar.builtInQualityProfiles.disableNotificationOnUpdate=false, sonar.javascript.globals=angular,goog,google,OpenLayers,d3,dojo,dojox,dijit,Backbone,moment,casper,_,sap, sonar.dbcleaner.hoursBeforeKeepingOnlyOneSnapshotByDay=24, sonar.yaml.file.suffixes=.yaml,.yml, sonar.auth.bitbucket.enabled=false, sonar.terraform.activate=true, sonar.css.file.suffixes=.css,.less,.scss,.sass, sonar.oe.proparse.debug=false, sonar.oe.issues.annotations=@InitializeComponent, sonar.docker.file.patterns=Dockerfile,*.dockerfile, sonar.auth.github.webUrl=https://github.com/, sonar.html.file.suffixes=.html,.xhtml,.cshtml,.vbhtml,.aspx,.ascx,.rhtml,.erb,.shtm,.shtml,.cmp,.twig, sonar.php.frameworkDetection=true, sonar.auth.gitlab.enabled=false, sonar.cpd.cross_project=false, sonar.cs.analyzer.dotnet.pluginVersion=10.6.0.109712, sonaranalyzer-vbnet.pluginVersion=10.6.0.109712, sonar.vbnet.ignoreHeaderComments=true, sonar.auth.github.groupsSync=false, sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByWeek=4, sonar.vbnet.analyzer.dotnet.pluginKey=vbnet, sonaranalyzer-vbnet.analyzerId=SonarAnalyzer.VisualBasic, sonar.sources=C:\ef\7.38\dev\common, sonar.scala.file.suffixes=.scala, sonar.cs.roslyn.ignoreIssues=false, sonar.cloudformation.activate=true, sonaranalyzer-cs.pluginKey=csharp, sonar.oe.propath=C:\ef\7.38\dev\i,C:\ef\7.38\dev\common,C:\progress\oe12.8\tty,C:\progress\oe12.8\tty\adecomm.pl,C:\progress\oe12.8\tty\adecomp.pl,C:\progress\oe12.8\tty\adeedit.pl,C:\progress\oe12.8\tty\adeshar.pl,C:\progress\oe12.8\tty\dataadmin.pl,C:\progress\oe12.8\tty\prodict.pl,C:\progress\oe12.8\tty\OpenEdge.Core.pl,C:\progress\oe12.8\tty\OpenEdge.BusinessLogic.pl,C:\progress\oe12.8\tty\netlib\OpenEdge.Net.pl, sonar.kubernetes.activate=true, sonar.oe.simplecpd=false, sonar.java.ignoreUnnamedModuleForSplitPackage=False, sonar.vbnet.analyzer.dotnet.staticResourceName=SonarAnalyzer-vbnet-10.6.0.109712.zip, sonar.json.file.suffixes=.json, sonar.oe.include.suffixes=i, sonaranalyzer-vbnet.ruleNamespace=SonarAnalyzer.VisualBasic, sonar.oe.propath.dlc=true, sonar.oe.expiration.check=60, sonar.cloudformation.file.identifier=AWSTemplateFormatVersion, sonar.cs.analyzer.dotnet.ruleNamespace=SonarAnalyzer.CSharp, sonar.auth.saml.providerName=SAML, provisioning.github.project.visibility.enabled=true, sonar.dbcleaner.daysBeforeDeletingAnticipatedTransitions=30, sonar.javascript.ignoreHeaderComments=true, sonar.oe.file.suffixes=p,w,i,cls, sonar.dbcleaner.daysBeforeDeletingClosedIssues=30, sonar.java.enablePreview=False, sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByMonth=52, sonar.lf.gravatarServerUrl=https://secure.gravatar.com/avatar/{EMAIL_MD5}.jpg?s={SIZE}&d=identicon, sonar.oedb.file.suffixes=df, sonar.core.serverBaseURL=http://nlc1dlnx19720:9025, sonar.ruby.coverage.reportPaths=coverage/.resultset.json, sonar.text.inclusions=**/*.sh,**/*.bash,**/*.zsh,**/*.ksh,**/*.ps1,**/*.properties,**/*.conf,**/*.pem,**/*.config,.env,.aws/config, sonar.vbnet.analyzer.dotnet.ruleNamespace=SonarAnalyzer.VisualBasic, sonar.qualityProfiles.allowDisableInheritedRules=true, sonar.oe.lint.pl.cache=C:\ef\7.38\dev\common\.sonarlint\pl.txt, sonaranalyzer-cs.staticResourceName=SonarAnalyzer-csharp-10.6.0.109712.zip, sonar.oe.skipProparse=false, sonar.notifications.runningDelayBeforeReportingStatus=600, sonar.auth.gitlab.allowUsersToSignUp=true, sonar.oe.cpd.annotations=Generated, sonar.projectCreation.mainBranchName=main, sonar.jsp.file.suffixes=.jsp,.jspf,.jspx, sonar.cs.analyzer.dotnet.staticResourceName=SonarAnalyzer-csharp-10.6.0.109712.zip, sonar.javascript.maxFileSize=1000, sonar.javascript.environments=amd,applescript,atomtest,browser,commonjs,embertest,greasemonkey,jasmine,jest,jquery,meteor,mocha,mongo,nashorn,node,phantomjs,prototypejs,protractor,qunit,serviceworker,shared-node-browser,shelljs,webextensions,worker, sonar.oe.license=AAEBAQAAAZt22qgAAAAA, sonar.authenticator.downcase=false, sonar.vbnet.analyzer.dotnet.analyzerId=SonarAnalyzer.VisualBasic, sonar.scm.disabled=false, sonar.ruby.exclusions=**/vendor/**, sonar.oe.lint.rcode.cache=C:\ef\7.38\dev\common\.sonarlint\rcc.txt, sonar.auth.saml.enabled=false, sonar.vbnet.file.suffixes=.vb, sonaranalyzer-cs.analyzerId=SonarAnalyzer.CSharp, sonar.core.id=86E1FA4D-AZVHHCgNJ-JdfM2tvxVg, sonar.cs.analyzer.dotnet.pluginKey=csharp, sonar.technicalDebt.ratingGrid=0.05,0.1,0.2,0.5, sonar.vbnet.analyzer.dotnet.pluginVersion=10.6.0.109712, sonar.technicalDebt.developmentCost=30, sonar.lf.enableGravatar=false, sonar.validateWebhooks=true, sonar.docker.activate=true, sonar.python.file.suffixes=py, sonaranalyzer-cs.pluginVersion=10.6.0.109712, sonar.oe.analytics=true, sonar.cs.file.suffixes=.cs,.razor, sonar.developerAggregatedInfo.disabled=false, sonar.plugins.downloadOnlyRequired=true, sonar.azureresourcemanager.file.suffixes=.bicep, sonar.javascript.file.suffixes=.js,.jsx,.cjs,.mjs,.vue, sonar.oe.dlc=c:\progress\oe12.8, sonar.allowPermissionManagementForProjectAdmins=true, sonar.text.inclusions.activate=true, sonaranalyzer-vbnet.staticResourceName=SonarAnalyzer-vbnet-10.6.0.109712.zip, sonar.vbnet.analyzeGeneratedCode=false, sonar.java.file.suffixes=.java,.jav, sonar.kotlin.file.suffixes=.kt,.kts, sonar.plugins.risk.consent=ACCEPTED, sonar.php.file.suffixes=php,php3,php4,php5,phtml,inc, sonar.auth.gitlab.url=https://gitlab.com, sonar.scanner.skipNodeProvisioning=false, sonar.oe.backslash.escape=false, sonar.xml.file.suffixes=.xml,.xsd,.xsl,.config, sonar.dbcleaner.weeksBeforeDeletingAllSnapshots=260, sonaranalyzer-vbnet.pluginKey=vbnet, sonar.azureresourcemanager.activate=true, sonar.java.jvmframeworkconfig.activate=true, sonar.updatecenter.url=https://downloads.sonarsource.com/sonarqube/update/update-center.properties, sonar.core.startTime=2025-09-19T12:26:33+0200}
  activeRules: [24 css, 214 python, 28 scala, 109 kotlin, 29 secrets, 265 javascript, 28 ruby, 8 cabl-security-rules, 1 rssw-oedb, 17 rssw-oe, 477 java, 3 rssw-oedb-main, 46 Web, 14 xml, 155 php, 267 typescript, 95 rssw-oe-main]
  inputFiles: [
    file:/C:/ef/7.38/dev/common/general/impexp.cls (UTF-8) [oe]
  ]
]

Index files
1 file indexed
No CSS, PHP, HTML or VueJS files are found in the project. CSS analysis is skipped.
OpenEdge plugin version: 3.4.0-3489a7dd
Loading OpenEdge settings for server ID '86E1FA4D-AZVHHCgNJ-JdfM2tvxVg'
DLC directory 'c:\progress\oe12.8' will be added to PROPATH
Using PROPATH : C:\ef\7.38\dev\i,C:\ef\7.38\dev\common,C:\progress\oe12.8\tty,C:\progress\oe12.8\tty\adecomm.pl,C:\progress\oe12.8\tty\adecomp.pl,C:\progress\oe12.8\tty\adeedit.pl,C:\progress\oe12.8\tty\adeshar.pl,C:\progress\oe12.8\tty\dataadmin.pl,C:\progress\oe12.8\tty\prodict.pl,C:\progress\oe12.8\tty\OpenEdge.Core.pl,C:\progress\oe12.8\tty\OpenEdge.BusinessLogic.pl,C:\progress\oe12.8\tty\netlib\OpenEdge.Net.pl
Reusing database schema from cache for project C:\ef\7.38\dev\common
Available processors: 24
Using 24 threads for analysis.
Analyzing all except non binary files
1 source file to be analyzed
1/1 source file has been analyzed
Analysis detected 2 issues and 0 Security Hotspots in 837ms
Found 2 issue(s) on project 'common'
Marker id 39756 not found.
org.eclipse.core.internal.resources.ResourceException: Marker id 39756 not found.
	at org.eclipse.core.internal.resources.Marker.checkInfo(Marker.java:83)
	at org.eclipse.core.internal.resources.Marker.getAttributes(Marker.java:183)
	at org.sonarlint.eclipse.core.internal.jobs.SonarLintMarkerUpdater.updateMarkerAttributes(SonarLintMarkerUpdater.java:309)
	at org.sonarlint.eclipse.core.internal.jobs.SonarLintMarkerUpdater.createOrUpdateMarkers(SonarLintMarkerUpdater.java:232)
	at org.sonarlint.eclipse.core.internal.jobs.SonarLintMarkerUpdater.createOrUpdateMarkers(SonarLintMarkerUpdater.java:143)
	at org.sonarlint.eclipse.core.internal.jobs.IssuesMarkerUpdateJob.lambda$0(IssuesMarkerUpdateJob.java:67)
	at org.eclipse.core.internal.resources.Workspace.run(Workspace.java:2315)
	at org.eclipse.core.internal.resources.Workspace.run(Workspace.java:2335)
	at org.sonarlint.eclipse.core.internal.jobs.IssuesMarkerUpdateJob.doRun(IssuesMarkerUpdateJob.java:63)
	at org.sonarlint.eclipse.core.internal.jobs.AbstractSonarJob.run(AbstractSonarJob.java:37)
	at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63)

SonarLint processing file /common/general/impexp.cls...
RCode Cache Generation: 0 ms
Starting analysis with configuration: [
  baseDir: C:\ef\7.38\dev\common
  extraProperties: {sonar.updatecenter.cache.ttl=3600000, sonar.auth.bitbucket.allowUsersToSignUp=true, sonar.cs.ignoreHeaderComments=true, sonar.typescript.file.suffixes=.ts,.tsx,.cts,.mts, sonar.auth.github.enabled=false, sonar.python.coverage.reportPaths=coverage-reports/*coverage-*.xml, sonar.text.activate=true, provisioning.gitlab.enabled=false, sonar.go.file.suffixes=.go, sonar.cs.analyzeRazorCode=true, sonar.auth.saml.applicationId=sonarqube, sonar.cs.analyzer.dotnet.analyzerId=SonarAnalyzer.CSharp, sonar.python.xunit.skipDetails=false, sonar.ipynb.file.suffixes=ipynb, sonar.dbcleaner.weeksBeforeKeepingOnlyAnalysesWithVersion=104, sonar.qualitygate.ignoreSmallChanges=true, sonar.auth.saml.signature.enabled=false, sonar.go.exclusions=**/vendor/**, sonar.php.exclusions=**/vendor/**, sonar.terraform.file.suffixes=.tf, sonar.forceAuthentication=true, sonar.notifications.delay=60, sonar.vbnet.roslyn.ignoreIssues=false, sonar.flex.file.suffixes=as, sonar.multi-quality-mode.enabled=true, sonar.oe.rcode.skip=false, sonar.filesize.limit=20, sonar.auth.gitlab.groupsSync=false, sonar.auth.github.apiUrl=https://api.github.com/, sonar.ruby.file.suffixes=.rb, sonaranalyzer-cs.ruleNamespace=SonarAnalyzer.CSharp, sonar.auth.github.allowUsersToSignUp=true, sonar.azureresourcemanager.file.identifier=https://schema.management.azure.com/schemas/,http://schema.management.azure.com/schemas/, sonar.cs.analyzeGeneratedCode=false, sonar.oe.binaries=C:\ef\7.38\oe12.8\build\common, sonar.python.xunit.reportPath=xunit-reports/xunit-result-*.xml, sonar.java.jvmframeworkconfig.file.patterns=**/src/main/resources/**/*app*.properties,**/src/main/resources/**/*app*.yaml,**/src/main/resources/**/*app*.yml, sonar.builtInQualityProfiles.disableNotificationOnUpdate=false, sonar.javascript.globals=angular,goog,google,OpenLayers,d3,dojo,dojox,dijit,Backbone,moment,casper,_,sap, sonar.dbcleaner.hoursBeforeKeepingOnlyOneSnapshotByDay=24, sonar.yaml.file.suffixes=.yaml,.yml, sonar.auth.bitbucket.enabled=false, sonar.terraform.activate=true, sonar.css.file.suffixes=.css,.less,.scss,.sass, sonar.oe.proparse.debug=false, sonar.oe.issues.annotations=@InitializeComponent, sonar.docker.file.patterns=Dockerfile,*.dockerfile, sonar.auth.github.webUrl=https://github.com/, sonar.html.file.suffixes=.html,.xhtml,.cshtml,.vbhtml,.aspx,.ascx,.rhtml,.erb,.shtm,.shtml,.cmp,.twig, sonar.php.frameworkDetection=true, sonar.auth.gitlab.enabled=false, sonar.cpd.cross_project=false, sonar.cs.analyzer.dotnet.pluginVersion=10.6.0.109712, sonaranalyzer-vbnet.pluginVersion=10.6.0.109712, sonar.vbnet.ignoreHeaderComments=true, sonar.auth.github.groupsSync=false, sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByWeek=4, sonar.vbnet.analyzer.dotnet.pluginKey=vbnet, sonaranalyzer-vbnet.analyzerId=SonarAnalyzer.VisualBasic, sonar.sources=C:\ef\7.38\dev\common, sonar.scala.file.suffixes=.scala, sonar.cs.roslyn.ignoreIssues=false, sonar.cloudformation.activate=true, sonaranalyzer-cs.pluginKey=csharp, sonar.oe.propath=C:\ef\7.38\dev\i,C:\ef\7.38\dev\common,C:\progress\oe12.8\tty,C:\progress\oe12.8\tty\adecomm.pl,C:\progress\oe12.8\tty\adecomp.pl,C:\progress\oe12.8\tty\adeedit.pl,C:\progress\oe12.8\tty\adeshar.pl,C:\progress\oe12.8\tty\dataadmin.pl,C:\progress\oe12.8\tty\prodict.pl,C:\progress\oe12.8\tty\OpenEdge.Core.pl,C:\progress\oe12.8\tty\OpenEdge.BusinessLogic.pl,C:\progress\oe12.8\tty\netlib\OpenEdge.Net.pl, sonar.kubernetes.activate=true, sonar.oe.simplecpd=false, sonar.java.ignoreUnnamedModuleForSplitPackage=False, sonar.vbnet.analyzer.dotnet.staticResourceName=SonarAnalyzer-vbnet-10.6.0.109712.zip, sonar.json.file.suffixes=.json, sonar.oe.include.suffixes=i, sonaranalyzer-vbnet.ruleNamespace=SonarAnalyzer.VisualBasic, sonar.oe.propath.dlc=true, sonar.oe.expiration.check=60, sonar.cloudformation.file.identifier=AWSTemplateFormatVersion, sonar.cs.analyzer.dotnet.ruleNamespace=SonarAnalyzer.CSharp, sonar.auth.saml.providerName=SAML, provisioning.github.project.visibility.enabled=true, sonar.dbcleaner.daysBeforeDeletingAnticipatedTransitions=30, sonar.javascript.ignoreHeaderComments=true, sonar.oe.file.suffixes=p,w,i,cls, sonar.dbcleaner.daysBeforeDeletingClosedIssues=30, sonar.java.enablePreview=False, sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByMonth=52, sonar.lf.gravatarServerUrl=https://secure.gravatar.com/avatar/{EMAIL_MD5}.jpg?s={SIZE}&d=identicon, sonar.oedb.file.suffixes=df, sonar.core.serverBaseURL=http://nlc1dlnx19720:9025, sonar.ruby.coverage.reportPaths=coverage/.resultset.json, sonar.text.inclusions=**/*.sh,**/*.bash,**/*.zsh,**/*.ksh,**/*.ps1,**/*.properties,**/*.conf,**/*.pem,**/*.config,.env,.aws/config, sonar.vbnet.analyzer.dotnet.ruleNamespace=SonarAnalyzer.VisualBasic, sonar.qualityProfiles.allowDisableInheritedRules=true, sonar.oe.lint.pl.cache=C:\ef\7.38\dev\common\.sonarlint\pl.txt, sonaranalyzer-cs.staticResourceName=SonarAnalyzer-csharp-10.6.0.109712.zip, sonar.oe.skipProparse=false, sonar.notifications.runningDelayBeforeReportingStatus=600, sonar.auth.gitlab.allowUsersToSignUp=true, sonar.oe.cpd.annotations=Generated, sonar.projectCreation.mainBranchName=main, sonar.jsp.file.suffixes=.jsp,.jspf,.jspx, sonar.cs.analyzer.dotnet.staticResourceName=SonarAnalyzer-csharp-10.6.0.109712.zip, sonar.javascript.maxFileSize=1000, sonar.javascript.environments=amd,applescript,atomtest,browser,commonjs,embertest,greasemonkey,jasmine,jest,jquery,meteor,mocha,mongo,nashorn,node,phantomjs,prototypejs,protractor,qunit,serviceworker,shared-node-browser,shelljs,webextensions,worker, sonar.oe.license=AAEBAQAAAZt22qgAAAAA, sonar.authenticator.downcase=false, sonar.vbnet.analyzer.dotnet.analyzerId=SonarAnalyzer.VisualBasic, sonar.scm.disabled=false, sonar.ruby.exclusions=**/vendor/**, sonar.oe.lint.rcode.cache=C:\ef\7.38\dev\common\.sonarlint\rcc.txt, sonar.auth.saml.enabled=false, sonar.vbnet.file.suffixes=.vb, sonaranalyzer-cs.analyzerId=SonarAnalyzer.CSharp, sonar.core.id=86E1FA4D-AZVHHCgNJ-JdfM2tvxVg, sonar.cs.analyzer.dotnet.pluginKey=csharp, sonar.technicalDebt.ratingGrid=0.05,0.1,0.2,0.5, sonar.vbnet.analyzer.dotnet.pluginVersion=10.6.0.109712, sonar.technicalDebt.developmentCost=30, sonar.lf.enableGravatar=false, sonar.validateWebhooks=true, sonar.docker.activate=true, sonar.python.file.suffixes=py, sonaranalyzer-cs.pluginVersion=10.6.0.109712, sonar.oe.analytics=true, sonar.cs.file.suffixes=.cs,.razor, sonar.developerAggregatedInfo.disabled=false, sonar.plugins.downloadOnlyRequired=true, sonar.azureresourcemanager.file.suffixes=.bicep, sonar.javascript.file.suffixes=.js,.jsx,.cjs,.mjs,.vue, sonar.oe.dlc=c:\progress\oe12.8, sonar.allowPermissionManagementForProjectAdmins=true, sonar.text.inclusions.activate=true, sonaranalyzer-vbnet.staticResourceName=SonarAnalyzer-vbnet-10.6.0.109712.zip, sonar.vbnet.analyzeGeneratedCode=false, sonar.java.file.suffixes=.java,.jav, sonar.kotlin.file.suffixes=.kt,.kts, sonar.plugins.risk.consent=ACCEPTED, sonar.php.file.suffixes=php,php3,php4,php5,phtml,inc, sonar.auth.gitlab.url=https://gitlab.com, sonar.scanner.skipNodeProvisioning=false, sonar.oe.backslash.escape=false, sonar.xml.file.suffixes=.xml,.xsd,.xsl,.config, sonar.dbcleaner.weeksBeforeDeletingAllSnapshots=260, sonaranalyzer-vbnet.pluginKey=vbnet, sonar.azureresourcemanager.activate=true, sonar.java.jvmframeworkconfig.activate=true, sonar.updatecenter.url=https://downloads.sonarsource.com/sonarqube/update/update-center.properties, sonar.core.startTime=2025-09-19T12:26:33+0200}
  activeRules: [24 css, 214 python, 28 scala, 109 kotlin, 29 secrets, 265 javascript, 28 ruby, 8 cabl-security-rules, 1 rssw-oedb, 17 rssw-oe, 477 java, 3 rssw-oedb-main, 46 Web, 14 xml, 155 php, 267 typescript, 95 rssw-oe-main]
  inputFiles: [
    file:/C:/ef/7.38/dev/common/general/impexp.cls (UTF-8) [oe]
  ]
]

Index files
1 file indexed
No CSS, PHP, HTML or VueJS files are found in the project. CSS analysis is skipped.
OpenEdge plugin version: 3.4.0-3489a7dd
Loading OpenEdge settings for server ID '86E1FA4D-AZVHHCgNJ-JdfM2tvxVg'
DLC directory 'c:\progress\oe12.8' will be added to PROPATH
Using PROPATH : C:\ef\7.38\dev\i,C:\ef\7.38\dev\common,C:\progress\oe12.8\tty,C:\progress\oe12.8\tty\adecomm.pl,C:\progress\oe12.8\tty\adecomp.pl,C:\progress\oe12.8\tty\adeedit.pl,C:\progress\oe12.8\tty\adeshar.pl,C:\progress\oe12.8\tty\dataadmin.pl,C:\progress\oe12.8\tty\prodict.pl,C:\progress\oe12.8\tty\OpenEdge.Core.pl,C:\progress\oe12.8\tty\OpenEdge.BusinessLogic.pl,C:\progress\oe12.8\tty\netlib\OpenEdge.Net.pl
Reusing database schema from cache for project C:\ef\7.38\dev\common
Available processors: 24
Using 24 threads for analysis.
Analyzing all except non binary files
1 source file to be analyzed
1/1 source file has been analyzed
Analysis detected 2 issues and 0 Security Hotspots in 510ms
Found 2 issue(s) on project 'common'

Update: when the error in the log occurs, the marker in the editor is removed.

[gquerret]

Will be investigated.