spcaf results severity mappings in sonarqube

Note: Please note that Rencore will no longer provide updates for SPCAF integration into SonarQube. SPCAF version 7.6.0.0. is the last plugin available, support will continue as we continue to support SPCAF version 7.6.0.0.

Once you have performed your analysis in SonarQube you will have the results which then shows the severity if any with your project. Below is a table of what those severity means in SonarQube.

Tables can’t be imported directly. Please insert an image of your table which can be found here.

So how do these severity levels in SonarQube map to those of SPCAF?

As there is the same number of levels of severity on both systems the mapping is straightforward as you can see in the table below:

Tables can’t be imported directly. Please insert an image of your table which can be found here.

For a detailed explanation for the SPCAF Severity levels please go to the Knowledge Base article What do the reports mean after the SPCAF analysis?