ASVS security report

SonarQube
1

Hi
we are running 9.9 with an Enterprise license.
I am looking for details (mapping) on the different security reports and actual findings/issues in Sonarqube. i.e. which issue contributes to which item in a given security report.

thanks

2

Hey there.

At a project level, you should be able to click on the number of issues in the report to take you to the issues or security hotspots contributing to that rating.

At a portfolio-level, this is possible for vulnerabilities, but not security hotspots.