We’ve integrated Static Code analysis on our CI pipelines with a feedback-ingrained notification system for OWASP vulnerabilities for our web-apps. But it would be of great work if SonarQube DC edition could have
- Branch Analysis
- Pull Request Decoration
For the purpose of creating work items and bugs. Any plans to mediate this in the future?