SonarSource is expanding SonarQube with SonarQube Advanced Security to include third-party open-source code analysis capabilities.
SonarQube Advanced Security provides developers with enhanced security features to find and fix code quality and security issues in the development phase.
The solution includes software composition analysis, static application security testing, license compliance, and security reporting.
SonarQube Advanced Security integrates technology from Tidelift to improve third-party code quality and security.