Dedicated ZAP SonarQube plugin available

[steve.s...@owasp.org]

I was recently asked by a few members of the ZAP community to create a dedicated ZAP plugin for SonarQube. I'm pleased to announce that the plugin is available at: https://github.com/stevespringett/zap-sonar-plugin

The plugin is based off of work from the OWASP Dependency-Check SonarQube plugin for which I am the author and a core contributor of Dependency-Check.

I'm looking for volunteers from the ZAP community to enhance and maintain the ZAP-specific portions of the SonarQube plugin going forward. I am not actively involved in the ZAP community nor plan to be. I plan on maintaining the SonarQube specific portions of the plugin for the foreseeable future, but the project could really benefit from someone who is already engaged in the ZAP community and uses the tool.

[psiinon]

Great work Steve!

Anyone fancy taking this on?
It would be great to see this maintained as I'm sure a lot of people will want to use it.

You dont need to be a ZAP 'expert' we can help with the ZAP side ;)

Many thanks,

Simon