Stephen Scott

Principal Architect at ModusBox
Has 10+ Years Of Experience

Badges

20 Points5 Years

User Activity

Almost 3 years ago

Replied to Rohit Sircar Which code scanning solution is scanning MuleSoft?

This tool is also known to work : https://fossa.com/

Almost 3 years ago

Replied to Stephen Scott Which code scanning solution is scanning MuleSoft?

Let me chase up with one of my developers - we did this for a large consultancy who had existing subscriptions embedded into the ADO pipelines we built. I will check and get back to you .

Almost 3 years ago

Replied to Rohit Sircar Which code scanning solution is scanning MuleSoft?

@Rohit Sircar MUnit, SonarQube are for testing/code quality - but not for jar and source vulnerability scanning...

Almost 3 years ago

Answered a question: Which code scanning solution is scanning MuleSoft?

We also found this issue, related to the specific POM package for MuleSoft. Quite a few of the tools don't support this. We did however have some success with Fortify on Demand and mend.io WhiteSource.

Answers

Almost 3 years ago

API Management

Which code scanning solution is scanning MuleSoft?