About the SonarQube Server Integration
SonarQube Server is Sonar’s self-managed code quality and security analysis platform, scanning source code for bugs, vulnerabilities, and code smells as part of the software development lifecycle. Widely used in CI/CD pipelines, SonarQube Server helps development and security teams catch security issues before code reaches production. Part of Synqly’s Application Security Unified API, the SonarQube Server integration enables security platforms to query applications and their findings, including findings combined across every application in an instance, through a normalized connector instead of building directly against SonarQube’s API.
Integration Use Cases
Get Application Finding Details
Returns the details of the finding matching `{findingId}` where the finding belongs to the application matching `{applicationId}` from the token-linked application security integration.
Query Application Findings
Returns a list of an application\\\'s findings matching `{applictionId}` and the query from a the token-linked application security integration.
Query Applications
Returns a list of applications matching the query from a the token-linked application security integration.
Query findings across all applications
Returns a list of each findings details combined with the application details for all applications in the token-linked application security integration. This API may perform multiple provider API calls per executation so can be slower to respond.
Integration Resources
About SonarQube
SonarQube, developed by Sonar, is a widely used code quality and security analysis platform that scans source code for bugs, vulnerabilities, and code smells as part of the software development lifecycle. Integrated into CI/CD pipelines by development and security teams worldwide, SonarQube has become a standard tool for enforcing secure coding practices before software reaches production. Teams looking to integrate with SonarQube or build a SonarQube integration can use Synqly to query applications and application security findings from SonarQube through a normalized connector without custom API development.