Skip to technology filters Skip to main content
Dynatrace Hub

Extend the platform,
empower your team.

Popular searches:
Home hero bg
SonarQubeSonarQube
SonarQube

SonarQube

Ingest SonarQube vulnerability findings, metrics, and audit logs.

Extension
Free trialDocumentation
Integration diagram.Vulnerability dashboard.Coverage dashboard.
  • Product information
  • Release notes

Overview

Dynatrace integrates with SonarQube to enable visibility, orchestration, and prioritization of code and third-party dependencies vulnerability findings.

Capabilities:

  • Single pane of glass: Ingest vulnerability findings, metrics, and audit logs from SonarQube into Dynatrace (powered by OpenPipelineā„¢)

  • Unified analysis: Dynatrace transforms and maps the findings to a unified format for vulnerability findings (powered by Dynatrace Semantic Dictionary)

  • Findings operationalization: Prioritize, visualize, and automate vulnerability findings with runtime context

  • Unveil blind spots: Discover and eliminate coverage gaps in your Software Development Lifecycle (SDLC)

Use cases

  • Overview: Visualize and report your current security posture and trends around vulnerability findings across vulnerability scanners with Dashboards.

  • Prioritization: Analyze and prioritize vulnerability findings across multiple tools and products uniformly with Notebooks.

  • Automation: Create notifications and tickets for critical vulnerability findings with Workflows.

  • Investigation: Use vulnerability findings as an additional dimension for threat hunting and incident forensics using Security Investigator.

Get started

For more information on the installation and configuration, please see SonarQube extension in the Dynatrace Documentation.

Details

Compatibility information

SonarQube Server Web API v1

Dynatrace
DocumentationMore Information
By Dynatrace
Dynatrace support center
Subscribe to new releases
Copy to clipboard

Related to SonarQube

Dashboards logo

Dashboards

Transform complex data into clear visualizations with custom dashboards.

ActiveGate logo

ActiveGate

Route traffic, monitor clouds and remote technologies & run Synthetic monitors

OpenPipeline logo

OpenPipeline

Configure ingest, processing, and persistence of data sent to Grail.

Extensions logo

Extensions

Manage Dynatrace extensions for hundreds of technologies.

Full version history

To have more information on how to install the downloaded package, please follow the instructions on this page.
ReleaseDate

Full version history

šŸš€ Improved in this version:

  • BLOCKER and INFO severities are now mapped to Dynatrace severities CRITICAL and NONE respectively.
  • Updated dashboards.

🪲 Fixed in this version:

  • Fixed issue where findings would be ingested multiple times on subsequent executions.
  • finding.severity now correctly shows the original SonarQube report severity level.
  • finding.time.created now reports the time the finding was created for the specific scan reported.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Full version history

šŸš€ Improved in this version:

  • Added proxy support for connecting to SonarQube.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Full version history

šŸš€ Improved in this version:

  • Ingested security and SDLC events are now enriched with the fields dt.security_context, dt.cost.costcenter and dt.cost.product defined in the monitoring configuration.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Full version history

šŸš€ Improved in this version:

  • The artifact.path and artifact.filename fields are now mapped.
  • Aligned component.name, artifact.name and object.name fields to correspond to the name of the scanned file.
  • The artifact.repository field is now mapped to the SonarQube project name if a repository binding does not exist.
  • The finding.type field is now mapped to CODE_ISSUE.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Full version history

✨ New in this version:

  • Added an option to provide a custom CA bundle to authenticate requests to SonarQube.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Full version history

🪲 Fixed in this version:

  • Added internal metadata.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Full version history

✨ New in this version:

  • All events ingested by the extension now have sonarqube.project.url, sonarqube.project.name and sonarqube.project.id fields.
  • Added support for Sonarqube Cloud.
  • Added a SonarQube posture overview ready-made dashboard.

šŸš€ Improved in this version:

  • Metric dimension component was renamed to project. āš ļø Any dashboards, notebooks, workflows and alerts relying on this dimension will need to be adjusted for the new name āš ļø
  • Event attribute sonarqube.url was renamed to sonarqube.tenant. āš ļø Any dashboards, notebooks, workflows and alerts relying on this attribute will need to be adjusted for the new name āš ļø
  • Metrics sonarqube.ncloc and sonarqube.bugs were renamed to sonarqube.code.lines and sonarqube.code.bugs. āš ļø Any dashboards, notebooks, workflows and alerts relying on these metrics will need to be adjusted for the new name āš ļø
  • The SDLC events' control.score field is now mapped from 0-1, reflecting the original values reported by Sonarqube.

🪲 Fixed in this version:

  • Fixed audit log content being empty.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Full version history

🪲 Fixed in this version:

  • Fixed audit log toggle not working correctly.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Full version history

✨ New in this version:

  • Added vulnerability finding and scan event extraction.
  • Added SDLC event extraction.
  • Added metric reporting.
  • Added audit log monitoring.

ā„¹ļø This version requires ActiveGate version 1.313.0 or higher.

Dynatrace Hub
Hub HomeGet data into DynatraceBuild your own app
Dynatrace Intelligence - Agentic Operations SystemThe Dynatrace Agentic AI ecosystem
Log Management and AnalyticsKubernetesAI and LLM ObservabilityInfrastructure ObservabilitySoftware DeliveryApplication ObservabilityApplication SecurityBusiness ObservabilityDigital Experience
Filter
Type
Built and maintained by
Deployment model
SaaS
  • SaaS
  • Managed
Partner FinderBecome a partnerDynatrace Developer

All

205 Results filtered by:

Palo Alto firewalls logo

Palo Alto firewalls

Palo Alto extension for problems detection

Extension
Confluent Cloud (Kafka) logo

Confluent Cloud (Kafka)

Remotely monitor your Confluent Cloud Kafka Clusters and other resources!

Extension
Kong - Prometheus logo

Kong - Prometheus

Monitor Prometheus metrics exposed by Kong and proxied upstream services

Extension
Nutanix Clusters logo

Nutanix Clusters

Monitor Nutanix clusters' performance, usage and availability, with Nutanix API.

Extension
Luna Network HSM Device logo

Luna Network HSM Device

Monitor your Luna Network Hardware Security Module (HSM) Devices through SNMP.

Extension
Consul Service Mesh (StatsD) logo

Consul Service Mesh (StatsD)

Extend visibility into your Consul Service Mesh instances to monitor health and improve performance.

Extension
Microsoft IIS logo

Microsoft IIS

Flexible and secure web server for hosting with Windows Server.

Extension
Kubernetes Monitoring Statistics logo

Kubernetes Monitoring Statistics

Troubleshoot your Dynatrace Kubernetes monitoring and Prometheus integration.

Extension
Snyk logo

Snyk

Ingest Snyk vulnerability findings, scans, and audit logs.

Extension
Citrix DaaS & Virtual Apps and Desktops logo

Citrix DaaS & Virtual Apps and Desktops

Gain insight into your Citrix DaaS & Virtual Apps and Desktops environments

Extension
Google Memorystore logo

Google Memorystore

Get insights into Google Memorystore service metrics collected from the Google Operations API to ensure health of your cloud infrastructure.

Extension
Databricks Workspace logo

Databricks Workspace

Remotely monitor your Databricks Workspaces!

Extension
UPS Device logo

UPS Device

Monitor your Uninterruptible Power Supplies (UPS) over SNMP

Extension
Google App Engine (integration) logo

Google App Engine (integration)

Insights into Google App Engine service metrics collected from Operations API

Extensioncoming soon
Traceroute logo

Traceroute

Run traceroute commands and collect step performance metrics

Extension
[Deprecated] Kubernetes PVCs logo

[Deprecated] Kubernetes PVCs

Monitor your Kubernetes persistent volume claims and alert on capacity limits.

Extension
Google Cloud Storage Transfer logo

Google Cloud Storage Transfer

Get insights into Google Cloud Storage Transfer metrics collected from the Google Operations API to ensure health of cloud infrastructure.

Extension
NVIDIA GPU logo

NVIDIA GPU

Monitor base parameters of the GPU, including load, memory and temperature

Extension
Oracle Database logo

Oracle Database

Observe, analyze and optimize the usage, health and performance of your database

Extension
Dell iDRAC logo

Dell iDRAC

Connect to the Redfish API to get insights into your Dell iDRAC environment

Extension
Cisco ACI/APIC logo

Cisco ACI/APIC

Get insights into your Cisco Application Centric Infrastructure (ACI)

Extension
Azure Managed Apache Cassandra logo

Azure Managed Apache Cassandra

Gain insights into your Azure Managed Cassandra Instance health and performance

Extension
PayShield HSM Device logo

PayShield HSM Device

Monitor PayShield Payment Hardware Security Module (HSM) Devices through SNMP.

Extension
NetApp OnTap (Remote) logo

NetApp OnTap (Remote)

Remote extension that collects NetApp OnTap metrics from the OnTap 9.6+ API.

Extension
Google Firestore in Datastore mode logo

Google Firestore in Datastore mode

Get insights into Google Firestore in Datastore mode metrics collected from the Google Operations API to ensure health of infrastructure.

Extension
Redis (2.0) logo

Redis (2.0)

Collect important additional data for your Redis instances.

Extension
PHP-FPM logo

PHP-FPM

Monitor the PHP-FPM status of your applications with this extension.

Extension
Timedrift Monitoring logo

Timedrift Monitoring

Monitor your host's NTP/Chrony Time Offset!

Extension
Apache Kafka logo

Apache Kafka

Automatic and intelligent observability with trace and metric insights.

Extension
SNMP Generic Server logo

SNMP Generic Server

Monitor your Servers and Hosts over SNMP

Extension
MongoDB (local or remote monitoring) logo

MongoDB (local or remote monitoring)

Monitor your MongoDB servers either locally or remotely!

Extension
Connection Pools: C3P0 logo

Connection Pools: C3P0

Application server method of pooling and sharing connections to a database.

Extension
AWS Entities for Metric Streaming logo

AWS Entities for Metric Streaming

Analyse metrics in the context of an entity based on AWS Metric Streaming.

Extension
MongoDB Atlas logo

MongoDB Atlas

Remotely monitor your SaaS installation of MongoDB (Atlas)

Extension
Microsoft SQL Server logo

Microsoft SQL Server

Improve the health and performance monitoring of your Microsoft SQL Servers.

Extension
IBM MQ Appliance logo

IBM MQ Appliance

Monitor your IBM MQ Appliances over SNMP

Extension
AWS Cloud Monitoring logo

AWS Cloud Monitoring

New and enhanced monitoring capabilities for your AWS cloud platforms

Extension
Google Apigee logo

Google Apigee

Get insights into Google Apigee service metrics collected from the Google Operations API to ensure health of your cloud infrastructure.

Extension
Oracle Base DB and Autonomous DB on OCI logo

Oracle Base DB and Autonomous DB on OCI

Monitor health of the Oracle Base Service and Autonomous Database.

Extension
Google Pub/Sub Lite logo

Google Pub/Sub Lite

Get insights into Google Pub/Sub Lite service metrics collected from the Google Operations API to ensure health of the cloud infrastructure.

Extension
Infoblox DDI logo

Infoblox DDI

Monitor Infoblox DDI using SNMP

Extension
SAP HANA Database (remote monitoring) logo

SAP HANA Database (remote monitoring)

Easily understand the health and performance of your SAP HANA databases.

Extension
Connection Pools: WebSphere Liberty logo

Connection Pools: WebSphere Liberty

Application server method of pooling and sharing connections to a database.

Extension
Google Cloud Composer logo

Google Cloud Composer

Get insights into Google Cloud Composer metrics collected from the Google Operations API to ensure health of your cloud infrastructure.

Extension
Google Cloud Spanner logo

Google Cloud Spanner

Get insights into Google Cloud Spanner metrics collected from the Google Operations API to ensure health of your cloud infrastructure.

Extension
IBM i logo

IBM i

Collect performance data from your IBM i Hosts via this Remote extension.

Extension
Google reCAPTCHA Enterprise logo

Google reCAPTCHA Enterprise

Get insights into Google reCAPTCHA Enterprise metrics collected from the Google Operations API to ensure health of your cloud infrastructure

Extension
.NET logo

.NET

Automatic end-to-end observability forĀ .NET applications and processes.

Extension
Google Cloud's operations suite logo

Google Cloud's operations suite

Get insights into Google Cloud's operations suite metrics collected from the Google Operations API to ensure health of cloud infrastructure.

Extension
Google Vertex AI logo

Google Vertex AI

Get insights into Google Vertex AI service metrics.

Extension