OWASP SonarQube Project

Please help understand what is OWASP SonarQube Project ?

Is it a SonarSource Product/Feature ?
How is it different from SonarQube ? OR is it integrable with SonarQube ?

Hi @Tripti_Mittal ,

this was a old fork from sonarqube version 7.6 with a preconfigured plugin suite to be used for sast by the OWASP team. this project is not maintained anymore and the github repository has been archived as it is already covered by vanilla sonarqube.
you can get more information about the security analysis in sonarqube on our website: https://www.sonarqube.org/features/security/

hope that answers your question :slight_smile:

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.