Integrate your Dependency Check vulnerabilities in SonarQube Cloud

🔄 Seamless Integration Without Workflow Changes

Keep using Dependency Check just like you always have—no need to switch to SonarQube™ Server. With our plugin, you can easily import findings into SonarQube™ Cloud and enhance your security posture without disrupting your existing CI/CD process or changing tools.

⚙️ Simple Conversion and Fast Import

Effortlessly convert Dependency Check reports (JSON or XML) into a format SonarQube™ Cloud understands. Just run your scan, use our tool to convert the output, and import it directly using the sonar.externalIssuesReportPaths parameter. Security insights in minutes.

🔐 Unified View of Code and Dependencies

Bring Software Composition Analysis (SCA) into your SonarQube™ Cloud environment. Review both code-level and dependency vulnerabilities in one place. Make informed decisions, prioritize critical issues, and manage security without leaving your SonarCloud dashboard.

Versiones

Recursos

Version 1.0.2 • SonarQube™ Cloud

Liberada el 2026-01-21

Ver las 3 versiones

Resumen

Several bugs are fixed.

Detalles

Errors caused by incorrectly defining package.json have been corrected. Furthermore, when exporting to JSON, deleted vulnerabilities are now excluded.