- Checkmarx Documentation
- SAST/SCA Integrations
- CI/CD Plugins
- SonarQube Plugin
SonarQube Plugin
SonarQube (previously called Sonar) is an open source quality management platform, dedicated to continuously analyze and measure technical quality, from project portfolio to method. SonarQube supports languages: Java (including Android), C/C++, Objective-C, C#, PHP, Flex, Groovy, JavaScript, Python, PL/SQL, COBOL, Swift, etc. SonarQube offers reports on duplicated code, coding standards, unit tests, code coverage, code complexity, comments, bugs, and security vulnerabilities. SonarQube provides fully automated analysis, integrates with Maven, Ant, Gradle, MSBuild and continuous integration tools such as Atlassian Bamboo, Jenkins and Hudson, etc. SonarQube also integrates with Eclipse, Visual Studio and IntelliJ IDEA development environments through the SonarLint plugins as well as with external tools such as LDAP, Active Directory, GitHub, etc. For more information, please refer to the SonarQube Documentation - Using SonarQube