Does anyone have any success with a SAST code review tool that will produce formatted reports with an overview of the review outcomes?

We're using SonarQube to do reviews, which does a good enough job and provides a useful tool for individual developers, but in terms of generating a high-level report that can be generated and distributed without requiring looking in SonarQube itself seems lacking.

We're happy to use any tool, but finding one to produce such a report outside of what Veracode or Micro Focus does on a near-zero budget seems difficult.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.