Does anyone have any success with a SAST code review tool that will produce formatted reports with an overview of the review outcomes?
We're using SonarQube to do reviews, which does a good enough job and provides a useful tool for individual developers, but in terms of generating a high-level report that can be generated and distributed without requiring looking in SonarQube itself seems lacking.
We're happy to use any tool, but finding one to produce such a report outside of what Veracode or Micro Focus does on a near-zero budget seems difficult.
