# Is there dependency check in sonarcloud?

**URL:** <https://community.sonarsource.com/t/is-there-dependency-check-in-sonarcloud/102292>\
**Category:** SonarQube Cloud\
**Tags:** sonarqube-cloud\
**Created:** [October 10, 2023, 9:56am UTC](https://community.sonarsource.com/t/is-there-dependency-check-in-sonarcloud/102292 "2023-10-10T09:56:54Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![michaelthe](https://avatars.discourse-cdn.com/v4/letter/m/96bed5/32.png) [@michaelthe](https://community.sonarsource.com/u/michaelthe)\
**Post date:** [October 10, 2023, 9:56am UTC](https://community.sonarsource.com/t/is-there-dependency-check-in-sonarcloud/102292/1 "2023-10-10T09:56:54Z")

</div>

Is there dependency check in sonarcloud (not sonarqube)? For instance of 3rd party libraries used?

---

<div class="post-metadata">

**Author:** ![ganncamp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/ganncamp/32/1261_2.png) [@ganncamp](https://community.sonarsource.com/u/ganncamp)\
**Post date:** [October 11, 2023, 4:07pm UTC](https://community.sonarsource.com/t/is-there-dependency-check-in-sonarcloud/102292/2 "2023-10-11T16:07:55Z")

</div>

Hi,

Welcome to the community!

Sorry, but there’s not. We do SAST (among other things), not SCA.

&nbsp;  
HTH,  
Ann

---

<div class="post-metadata">

**Author:** ![michaelthe](https://avatars.discourse-cdn.com/v4/letter/m/96bed5/32.png) [@michaelthe](https://community.sonarsource.com/u/michaelthe)\
**Post date:** [October 12, 2023, 12:14pm UTC](https://community.sonarsource.com/t/is-there-dependency-check-in-sonarcloud/102292/5 "2023-10-12T12:14:23Z")

</div>

Hi Ann,

thanks for your reply.

BR Michael

---

<div class="post-metadata">

**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\
**Post date:** [March 18, 2025, 2:42pm UTC](https://community.sonarsource.com/t/is-there-dependency-check-in-sonarcloud/102292/8 "2025-03-18T14:42:16Z")

</div>

Hello from the future!

We recently announced SonarQube Advanced Security, which will include SCA capabilities. While it’s not available yet, we expect general availability for SonarQube Server in May 2025, and SonarQube Cloud Enterprise shortly after.

Please see this announcement for more details.

> [@Announcing SonarQube Advanced Security](https://community.sonarsource.com/t/announcing-sonarqube-advanced-security/136625):
>
> Sonar is excited to [announce SonarQube Advanced Security](https://www.sonarsource.com/company/press-releases/sonar-extends-code-security-coverage-with-sonarqube-advanced-security/), extending SonarQube’s analysis capabilities beyond first-party and AI-generated code to include third-party open source code. With this, we’re delivering the first fully integrated solution for finding and fixing code quality and code security issues in the development phase of the SDLC. The first step in integrating Sonar’s recent acquisition of Tidelift, SonarQube Advanced Security strengthens a robust set of existing security capabili…