Autosource - Automated Beginning Code Review Framework Integrated Amongst Sonarqube


AutoSource is an automated source code review framework integrated amongst SonarQube which is capable of performing static code analysis/reviews. It tin endure used for effectively finding the vulnerabilities at rattling early on phase of the SDLC(Software Development Life Cycle). The user tin scan the code past times only giving GIT repository link into the framework.
AutoSource framework is capable of performing a source code review on all platforms(MAC, Linux, in addition to Windows).

INSTALL
  1. Download the AutoSource repository into your system.
  2. Read the prerequisites.txt file in addition to install the dependencies (mentioned for each platform)
  3. Execute downloadSonar.py (python3 downloadSonar.py), this volition download in addition to setup the SonarQube framework which tin endure access from 'http://127.0.0.1:9000'
  4. After that run executeScanner.py (python3 executeScanner.py), this volition inquire for your GIT repository that yous desire to scan.
  5. Access the results on SonarQube Portal('http://127.0.0.1:9000')

Screenshots

Downloading SonarQube in addition to SonarScanner



SonarQube is upwards in addition to running


Executing Scanner


Scanning Started


Scanner Execution Successful


Results showing inwards SonarQube Dashboard


Collaborators
  • Malkit Singh
  • Shubham Shubhankar Sharma