We have been using Snyk but it does not support PNPM which we have switched most of our repo’s too.
Does SonarQube support pnpm?
SonarQube does not do Software Component Analysis (SCA, checking for dependencies with known vulnerabilities), but instead Static Analysis Security testing (SAST, analyzing code developers are writing). So there’s no such thing as SonarQube supporting pnpm 