OWASP SonarQube Project

Please help understand what is OWASP SonarQube Project ?
https://wiki.owasp.org/index.php/OWASP_SonarQube_Project

Is it a SonarSource Product/Feature ?
How is it different from SonarQube ? OR is it integrable with SonarQube ?

Hi @Tripti_Mittal ,

this was a old fork from sonarqube version 7.6 with a preconfigured plugin suite to be used for sast by the OWASP team. this project is not maintained anymore and the github repository has been archived as it is already covered by vanilla sonarqube.
you can get more information about the security analysis in sonarqube on our website: https://www.sonarqube.org/features/security/

hope that answers your question :slight_smile:

1 Like