Skip to content

Commit

Permalink
Update SAST.md
Browse files Browse the repository at this point in the history
  • Loading branch information
tdonaworth authored Mar 2, 2023
1 parent 26e59cc commit 23c8882
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/SAST.md
Original file line number Diff line number Diff line change
Expand Up @@ -156,5 +156,5 @@ snyk code test --severity-threshold=high
```

## :warning: SonarQube / SonarCloud :warning:
:warning: :exclaimation: <span style="color:red"> **SonarQube/Cloud is NOT ENOUGH** </span> :exclaimation: :warning:
:warning: <span style="color:red"> **SonarQube/Cloud is NOT ENOUGH** </span> :warning:
If you rely on SonarQube/Cloud as your only form of SAST, then you do NOT have sufficient SAST tooling in place. SonarQube/Cloud has limited Linting capabilities, and even more limited SAST abilities. It can detect some things, but compared to other Linters and SAST tools, it simply isn't enough and does not meet the needs to be considered a stand-alone SAST solution.

0 comments on commit 23c8882

Please sign in to comment.