Reporting vulnerabilities in GitLab

SonarQube Cloud
1

Hello,

I am currently using the SonarQube Cloud Enterprise edition and have a question regarding its features.

I noticed that the SonarQube Server edition offers a setup to generate a report of vulnerabilities in GitLab. However, I couldn’t find any mention of this feature in the documentation for the SonarQube Cloud edition. When I attempted to use the /api/issues/gitlab_sast_export endpoint via a curl request, I received an “Unknown URL” response. Additionally, upon checking the SonarCloud API documentation, I couldn’t locate this endpoint.

Could you please confirm if this feature is exclusively available for the Server edition? If so, are there any plans to add it to the Cloud edition in the future?

Thank you for your assistance.

2

Hey Adrien.

I can confirm that this only exists on SonarQube Server right now. I don’t know what are plans are here, so I’ll ping the relevant product person!

1 Like