Alternatives and similar repositories for sonar-report

Users that are interested in sonar-report are comparing it to the libraries listed below

• cnescatlab / sonar-cnes-report
  Generates analysis reports from SonarQube web API.
  ☆587Updated last month
• jeremylong / open-vulnerability-cli
  A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mi…
  ☆154Updated last week
• OtherDevOpsGene / zap-sonar-plugin
  Integrates OWASP Zed Attack Proxy reports into SonarQube
  ☆73Updated 5 months ago
• MaibornWolff / dd-import
  A utility to (re-)import findings and language data into DefectDojo
  ☆43Updated last year
• hysnsec / awesome-sca
  A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
  ☆109Updated last year
• dependency-check / dependency-check-sonar-plugin
  Integrates Dependency-Check reports into SonarQube
  ☆679Updated 2 months ago
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆159Updated 2 months ago
• dbsystel / trivy-vulnerability-explorer
  Web application that allows to load a Trivy report in json format and displays the vulnerabilities of a single target in an interactive d…
  ☆161Updated this week
• ICTU / zap2docker-auth-weekly
  Zap baseline scanner in Docker with authentication
  ☆103Updated last year
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆861Updated 2 years ago
• porscheinformatik / sonarqube-licensecheck
  SonarQube Licensecheck Plugin
  ☆176Updated last week
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆110Updated last year
• SecObserve / SecObserve
  SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…
  ☆198Updated last week
• DependencyTrack / frontend
  Frontend UI for Dependency-Track
  ☆147Updated this week
• CycloneDX / cyclonedx-cli
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
  ☆436Updated 2 weeks ago
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆552Updated last week
• jenkinsci / dependency-track-plugin
  Main repository for the official Dependency-Track Jenkins plugin
  ☆50Updated this week
• umax / trivy-plugin-sonarqube
  A Trivy plugin that converts JSON report to SonarQube format
  ☆43Updated 11 months ago
• anchore / grype-vscode
  Grype vulnerability check plugin for Visual Studio Code
  ☆24Updated last year
• blackducksoftware / detect
  Scanning and analysis for Black Duck SCA products.
  ☆186Updated last week
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆58Updated last year
• sbaudoin / sonar-shellcheck
  SonarQube plugin to analyze Shell scripts with ShellCheck
  ☆60Updated 2 months ago
• fortify / FortifyVulnerabilityExporter
  Deprecated; please use fcli instead
  ☆27Updated 4 months ago
• SonarSource / sonar-scanner-cli-docker
  Docker image for SonarScanner CLI
  ☆201Updated 2 weeks ago
• goharbor / harbor-scanner-trivy
  Use Trivy as a plug-in vulnerability scanner in the Harbor registry
  ☆31Updated this week
• sonar-auth-oidc / sonar-auth-oidc
  OpenID Connect (OIDC) Plugin for SonarQube
  ☆124Updated 7 months ago
• secureCodeBox / secureCodeBox
  secureCodeBox (SCB) - continuous secure delivery out of the box
  ☆933Updated this week
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆99Updated this week
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆597Updated 8 months ago
• sonatype / helm3-charts
  Helm3 charts for Nexus IQ
  ☆124Updated last week