Alternatives and similar repositories for sonar-report

Users that are interested in sonar-report are comparing it to the libraries listed below

• hysnsec / awesome-sca
  A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
  ☆110Updated last year
• MaibornWolff / dd-import
  A utility to (re-)import findings and language data into DefectDojo
  ☆43Updated last year
• OtherDevOpsGene / zap-sonar-plugin
  Integrates OWASP Zed Attack Proxy reports into SonarQube
  ☆73Updated 6 months ago
• jeremylong / open-vulnerability-cli
  A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mi…
  ☆157Updated 3 weeks ago
• fortify / FortifyVulnerabilityExporter
  Deprecated; please use fcli instead
  ☆27Updated 5 months ago
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆161Updated 3 months ago
• cnescatlab / sonar-cnes-report
  Generates analysis reports from SonarQube web API.
  ☆599Updated 2 months ago
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆99Updated last month
• akawork / Sonar-Exporter
  ☆22Updated 2 years ago
• jenkinsci / dependency-track-plugin
  Main repository for the official Dependency-Track Jenkins plugin
  ☆50Updated this week
• dependency-check / dependency-check-sonar-plugin
  Integrates Dependency-Check reports into SonarQube
  ☆683Updated 3 months ago
• umax / trivy-plugin-sonarqube
  A Trivy plugin that converts JSON report to SonarQube format
  ☆44Updated last year
• dbsystel / trivy-vulnerability-explorer
  Web application that allows to load a Trivy report in json format and displays the vulnerabilities of a single target in an interactive d…
  ☆165Updated last week
• ICTU / zap2docker-auth-weekly
  Zap baseline scanner in Docker with authentication
  ☆103Updated last year
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆557Updated this week
• porscheinformatik / sonarqube-licensecheck
  SonarQube Licensecheck Plugin
  ☆177Updated this week
• SonarSource / sonar-scanner-cli-docker
  Docker image for SonarScanner CLI
  ☆202Updated last month
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆862Updated 2 years ago
• CycloneDX / cyclonedx-cli
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
  ☆447Updated last month
• OWASP / www-project-devsecops-guideline
  The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …
  ☆80Updated last month
• DependencyTrack / frontend
  Frontend UI for Dependency-Track
  ☆148Updated this week
• blackducksoftware / detect
  Scanning and analysis for Black Duck SCA products.
  ☆189Updated last week
• SecObserve / SecObserve
  SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…
  ☆202Updated last week
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆108Updated 2 years ago
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆596Updated 9 months ago
• fatihtokus / scan2html
  A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repo…
  ☆123Updated last month
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆58Updated last year
• sbaudoin / sonar-shellcheck
  SonarQube plugin to analyze Shell scripts with ShellCheck
  ☆60Updated 3 months ago
• aquasecurity / trivy-vscode-extension
  A VS Code Extension for Trivy
  ☆162Updated last week
• secureCodeBox / secureCodeBox
  secureCodeBox (SCB) - continuous secure delivery out of the box
  ☆941Updated this week