# PNPM support for SAST

**URL:** <https://community.sonarsource.com/t/pnpm-support-for-sast/75287>\
**Category:** SonarQube Server / Community Build\
**Tags:** sonarqube, scanner\
**Created:** [October 31, 2022, 9:44am UTC](https://community.sonarsource.com/t/pnpm-support-for-sast/75287 "2022-10-31T09:44:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![markbrikl88](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/markbrikl88/32/38593_2.png) [@markbrikl88](https://community.sonarsource.com/u/markbrikl88)\
**Post date:** [October 31, 2022, 9:44am UTC](https://community.sonarsource.com/t/pnpm-support-for-sast/75287/1 "2022-10-31T09:44:40Z")

</div>

We have been using Snyk but it does not support PNPM which we have switched most of our repo’s too.  
Does SonarQube support pnpm?

---

<div class="post-metadata">

**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\
**Post date:** [November 1, 2022, 9:22am UTC](https://community.sonarsource.com/t/pnpm-support-for-sast/75287/2 "2022-11-01T09:22:26Z")

</div>

SonarQube does not do Software Component Analysis (SCA, checking for dependencies with known vulnerabilities), but _instead_ Static Analysis Security testing (SAST, analyzing code developers are writing). So there’s no such thing as SonarQube supporting `pnpm` 😃