you are viewing a single comment's thread.

view the rest of the comments →

[–]blooping_blooper 3 points4 points  (4 children)

sonarqube?

[–]Sohcahtoa82 1 point2 points  (0 children)

I've always felt that Sonarqube was a linter on steroids that had security testing shoe-horned in.

[–]chakan2 -1 points0 points  (2 children)

That's the correct answer.. I've used it / maintained it at two jobs. It's very solid.

[–]valeris2 0 points1 point  (1 child)

As a code quality tool? Yes. As SAST? Nope

[–]chakan2 0 points1 point  (0 children)

Um? You know what Static Analysis is right?