PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.
https://bandit.readthedocs.io
Apache License 2.0
6.45k stars 606 forks source link

Any chance of supporting sonarqube plugin? #729

Open jooeji opened 3 years ago

jooeji commented 3 years ago

We use sonarqube to do static code detection in the ci/cd process, so expect to support sonarqube plugin.

ericwb commented 2 years ago

No one is currently looking at it, but we welcome contributions! To get started, would this link on a generic issue import format be suitable for your use case? https://docs.sonarqube.org/latest/analysis/generic-issue/