Help with generating reporting on Security Hotspots for all Projects

SonarQube Server / Community Build
, ,
1

Hi,

Currently we want to generate reports for our products on the number of vulnerabilities, but we want to focus on the Security Hotspots as opposed to the Security issues. Is there a way where we can generate a csv, xls or json of all security hotspots in total?

I know we can use the api to generate for one product at a time but looking to get all security hotspots for all products in one go.

  • Version = Enterprise edition 10.4.1
  • Deployed on prem.
1 Like
2

Hey there.

You will have to go project by project, as there is no API to globally search through Security Hotspots on a SonarQube instance.

1 Like
3

Thanks Colin,

Is this something that can be raised with Sonar directly as a feature request to add an API to globally search for all Security Hotspots?

1 Like
5

Hi @CameronPari ,

Thank you for your feedback and Iā€™m sorry it has taken so long for me to respond. I have created a feature request for this in our internal system.

John