Dear SonarQube Team and Users,
we (
RIGS IT GmbH) are developers of the security analysis tool 'Xanitizer'. The tool does a static code analysis and data flow analysis to find security vulnerabilities in Java code. The tool can be
downloaded for free.
For monitoring the results we now have developed a SonarQube plugin that can be downloaded
here. The plugin does not run a security analysis by itself, it just evaluates the result files produced by the main tool, so the Xanitizer is always required.
It would be great if you could add at least a reference to the plugin in the plugin library. Making the plugin open source is planned for the (near) future so that it can be added to the Update Center eventually.
If there are any additional requirements please let us know.
Regards,
Norman Wenzel
RIGS IT GmbH