Dependency management with SonarCloud?

[akhan4u (amaan)]

Hey there ,

I was trying to figure out dependency management and stumbled upon tools like Dependabot and Renovate. However, I’d like to check if SonarCloud (SAAS) can offer dependency management out of the box. I could not find anything particular related to this context in the docs. Is there any way to achieve this, Can you point me to the examples and docs wherever possible?

Any help will be appreciated.

#dependabot
sonarcloud
#renovate

[Colin]

Hey there.

We don’t cover SCA (Software Component Analysis).

[akhan4u (amaan)]

Cool thanks!

[Colin]

Hello from the future!

We recently announced SonarQube Advanced Security, which will include SCA capabilities. While it’s not available yet, we expect general availability for SonarQube Server in May 2025, and SonarQube Cloud Enterprise shortly after.

Please see this announcement for more details.

Announcing SonarQube Advanced Security

Sonar is excited to announce SonarQube Advanced Security, extending SonarQube’s analysis capabilities beyond first-party and AI-generated code to include third-party open source code. With this, we’re delivering the first fully integrated solution for finding and fixing code quality and code security issues in the development phase of the SDLC. The first step in integrating Sonar’s recent acquisition of Tidelift, SonarQube Advanced Security strengthens a robust set of existing security capabili…