# Support OWASP Dependency Check plugin

**URL:** <https://community.sonarsource.com/t/support-owasp-dependency-check-plugin/3907>\
**Category:** Suggest new features\
**Tags:** sonarqube-cloud\
**Created:** [November 1, 2018, 5:29pm UTC](https://community.sonarsource.com/t/support-owasp-dependency-check-plugin/3907 "2018-11-01T17:29:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![fbierhaus](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/fbierhaus/32/1406_2.png) [@fbierhaus](https://community.sonarsource.com/u/fbierhaus)\
**Post date:** [November 1, 2018, 5:29pm UTC](https://community.sonarsource.com/t/support-owasp-dependency-check-plugin/3907/1 "2018-11-01T17:29:11Z")

</div>

Sonar Qube supports the OWASP Dependency Check plugin, but Sonar Cloud does not.

---

<div class="post-metadata">

**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\
**Post date:** [November 1, 2018, 5:51pm UTC](https://community.sonarsource.com/t/support-owasp-dependency-check-plugin/3907/2 "2018-11-01T17:51:50Z")

</div>

> [@fbierhaus](#):
>
> Sonar Qube supports the OWASP Dependency Check plugin, but Sonar Cloud does not.

SonarCloud does not support third-party plugins (and for support matters, neither does SonarSource, just to be clear). However, if reporting on dependencies with known vulnerabilities is a feature you would like to see baked into SonarQube/SonarCloud, I suggest raising the matter with that angle. 🙂

---

<div class="post-metadata">

**Author:** ![Rick-at-KUBRA](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/rick-at-kubra/32/1915_2.png) [@Rick-at-KUBRA](https://community.sonarsource.com/u/Rick-at-KUBRA)\
**Post date:** [December 17, 2018, 8:09pm UTC](https://community.sonarsource.com/t/support-owasp-dependency-check-plugin/3907/3 "2018-12-17T20:09:22Z")

</div>

As @Colin suggested, I created feature request for this: [Support Dependency Checks for Known Vulnerabilities](https://community.sonarsource.com/t/support-dependency-checks-for-known-vulnerabilities/5188)