Hello Team,
We are looking to perform **Static Application Security Testing (SAST)** on our EspoCRM application and generate a security scanning report to identify potential vulnerabilities and code-quality issues.
We would appreciate your guidance on the following questions:
1. Does EspoCRM officially support SAST scanning using SonarQube?
2. Is there any recommended configuration, plugin, or integration for running SonarQube analysis on an EspoCRM codebase?
3. Are there any known compatibility considerations when scanning EspoCRM's PHP code and custom extensions?
4. Which SAST tool do you recommend for EspoCRM projects to identify security vulnerabilities and generate a detailed report?
5. Can the scanning process be integrated into a CI/CD pipeline to generate reports for ongoing code changes?
Our objective is to assess the security of the EspoCRM codebase and our customizations, identify vulnerabilities, and generate a report that can be used for security review and remediation.
Please share any recommended tools, configuration steps, or official documentation.
Thank you for your support.
We are looking to perform **Static Application Security Testing (SAST)** on our EspoCRM application and generate a security scanning report to identify potential vulnerabilities and code-quality issues.
We would appreciate your guidance on the following questions:
1. Does EspoCRM officially support SAST scanning using SonarQube?
2. Is there any recommended configuration, plugin, or integration for running SonarQube analysis on an EspoCRM codebase?
3. Are there any known compatibility considerations when scanning EspoCRM's PHP code and custom extensions?
4. Which SAST tool do you recommend for EspoCRM projects to identify security vulnerabilities and generate a detailed report?
5. Can the scanning process be integrated into a CI/CD pipeline to generate reports for ongoing code changes?
Our objective is to assess the security of the EspoCRM codebase and our customizations, identify vulnerabilities, and generate a report that can be used for security review and remediation.
Please share any recommended tools, configuration steps, or official documentation.
Thank you for your support.