sonar-gitlab-converter

A tool that convert SonarQube Issues from API to GitLab Vulnerability Report format


License
ISC
Install
npm install sonar-gitlab-converter@1.1.0

Documentation

sonar-gitlab-converter

Description

sonar-gitlab-converter is a tool that convert SonarQube Issues from API to GitLab Vulnerability Report format.

Installation

npm i -g sonar-gitlab-converter

Usage

sonar-gitlab-converter --host=<host> --token=<token> --project=<project ID>

Output:

  • A json file named gl-sast-report.json in GitLab Vulnerability Report format

Arguements:

Key Value
host The web services composing the web API are documented within SonarQube, through the URL /web_api. You can also access the web API documentation from the top bar in SonarQube
token You can create a token in /account/security
project SonarQube Project Key

More details: https://docs.sonarqube.org/latest/extend/web-api/