search

lando / lando

A development tool for all your projects that is fast, easy, powerful and liberating
https://lando.dev
GNU General Public License v3.0
4.02k stars 542 forks source link

Support Security:SonarQube in Services out-of-the-box #3482

Open ProFire opened 1 year ago

ProFire commented 1 year ago

Lando already supports Databases, Caches, Indexes, Web Servers, DevTools, and DIY. How about adding Security as a new segment?

Given that Security is high on the priority list in enterprises, it would be a beneficial add tools related to security. That way, we developers can Clean As You Code, especially in large organisation. Project managers and Product Owners are increasingly enforcing Shift Left Security. Having such tools easily available goes a long way.

Personally I'm in the midst of manually implementing SonarQube alongside my Lando environment. It would be a fine addition if Lando can support it out of the box, like every other tools already supported.

I'm also open to using any other security related tools Lando chooses. As long as it can perform SAST on PHP codes during development.

tormi commented 4 months ago

You can use SonarLint in Connected Mode with your IDE for that.

BTW, I implemented SonarQube Lando recipe for local environment: https://github.com/lando/docs/issues/264.