sonar-gitlab-converter

Description

sonar-gitlab-converter is a tool that convert SonarQube Issues from API to GitLab Vulnerability Report format.

Installation

npm i -g sonar-gitlab-converter

Usage

sonar-gitlab-converter --host=<host> --token=<token> --project=<project ID>

Output:

• A json file named gl-sast-report.json in GitLab Vulnerability Report format

Arguements:

Key	Value
host	The web services composing the web API are documented within SonarQube, through the URL /web_api. You can also access the web API documentation from the top bar in SonarQube
token	You can create a token in /account/security
project	SonarQube Project Key

More details: https://docs.sonarqube.org/latest/extend/web-api/