How to export sonarcloud code scanning alerts into Github advanced security interface?

SonarQube Cloud
,
1

We are looking for a way to Integrate sonarcloud code scanning alerts to Github advanced security interface. Source code is in C# , We are using dotnet sonarscanner which is integrated into Github actions workflow.

For Python scanning we are using sonarcloud github actions which shows code scanning alerts into Github advanced security tool. Whereas for compiled languages we don’t see this feature.

1 Like
2

Hey there.

This should all happen automatically.

  • Is your project bound?
  • Are you sure the Advanced Security features are turned on for this GitHub Repo?
3

Yes Advanced security is enabled for this repo and project is bound

4

We are using trial license of SonarCloud, evaluating scanning on Github private repos

5

Thanks for the information.

Do you see vulnerabilities raised in SonarCloud for this project (the C# one)?

6

Yes, I see vulnerabilities raised by SonarCloud, it is added as comment as well on Github PR

7

I see its added only for the main branch