Hello guys, For my project I have Trivy set up to take care of scanning the built images for vulnerabilities. Trivy is set up to generate reports in Json and SARIF formats. I need to display these reports along with other code issues and hotspots that are shown in sonar cloud. Can this type of tas…

Hey there. The ability to import SARIF reports (like is already possible for SonarQube) is on our roadmap (I encourage you to go vote for the card!) For now, you might be able to convert a JSON/SARIF report to Generic issue data to be imported into SonarCloud.

Hey @Sasank_Madati Just an update, we now support importing SARIF reports in SonarCloud. [image] SonarCloud can import SARIF files to load external issues Announcements Dear Community, We are thrilled to announce a highly expected feature that has finally arrived on Son…

Display Trivy reports on sonarcloud

SonarQube Cloud

Colin (Colin) September 4, 2024, 5:13pm 5

Hey @Sasank_Madati

Just an update, we now support importing SARIF reports in SonarCloud.

Topic		Replies	Views
Support SARIF reports Suggest new features sonarqube , external_issues	24	7917	September 4, 2024
SonarCloud - SARIF ingestion and visualization Suggest new features	8	566	September 4, 2024
Problem integrating Trivy scan results with SonarQube Dashboard SonarQube Server / Community Build sonarqube	3	424	July 29, 2025
Export to SARIF Suggest new features sarif	11	1775	March 19, 2026
Trouble importing SARIF reports SonarQube Server / Community Build	8	2405	January 9, 2023

Display Trivy reports on sonarcloud

Related topics