AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLC(Software Development Life Cycle). The user can scan the code by just giving GIT repository link into the framework.
AutoSource framework is capable of performing a source code review on all platforms(MAC, Linux, and Windows).
- Download the AutoSource repository into your system.
- Read the prerequisites.txt file and install the dependencies (mentioned for each platform)
- Execute downloadSonar.py (python3 downloadSonar.py), this will download and setup the SonarQube framework which can be access from 'http://127.0.0.1:9000'
- After that run executeScanner.py (python3 executeScanner.py), this will ask for your GIT repository that you want to scan.
- Access the results on SonarQube Portal('http://127.0.0.1:9000')
Screenshots
Downloading SonarQube and SonarScanner
SonarQube is up and running
Executing Scanner
Scanning Started
Scanner Execution Successful
Results showing in SonarQube Dashboard
Collaborators
- Malkit Singh
- Shubham Shubhankar Sharma
