Thank you Rohit. Understood that SonarQube on-prem is needed for the MuleSoft add-on. It requires quite an effort to install it and then to maintain it. Kindly asking if you can share the other code scanning tools that can be integrated with MuleSoft please. Ideally it would…

@Stephen Scott Thank you very much. Kindly asking if possible to share the success had with Fortify vs WhiteSource please. Are both tools in use - each for different purposes please ?