How to integrate SAST testing in TFS

SonarQube
1

Version 7.6
Need to perform SAST scanning for .Net application not able to see the option to enable the SAST scanning

2

Hi,

SonarQube performs static analysis, and SAST (static application security testing) is a natural part of it. You enable SAST scanning simply by making sure your Quality Profile contains security rules and running an analysis.

 
HTH,
Ann

3

Hi,

Thanks for the response. Do you have any manual to enable this process.

4

Hi,

I guess you’re looking for the documentation:

https://docs.sonarqube.org/latest

You’ll want to start by installing a server:

https://docs.sonarqube.org/latest/setup/install-server/

Then you need to install a scanner, probably SonarScanner for MSBuild:

https://docs.sonarqube.org/latest/analysis/scan/sonarscanner-for-msbuild/

And then you analyze.

 
Ann

5

Thank you