Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
autoSource — Automated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories across all platforms. | Kitploit
Tools/GitHubGitHub/shubhamshubhankar/autosource
Static Code Analysis (SAST)Vulnerability AnalysisCode AnalysisDevSecOps
GitHubshubhamshubhankar/autosource

autoSource

Automated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories across all platforms.

View Repository
70247 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

AutoSource

AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLC(Software Development Life Cycle). The user can scan the code by just giving GIT repository link into the framework.

AutoSource framework is capable of performing source code review on all platforms(MAC, Linux and Windows).

INSTALL

  1. Download the AutoSource repository into your system.
  2. Read the prerequisites.txt file and install the dependencies (mentioned for each platform)
  3. Execute downloadSonar.py (python3 downloadSonar.py), this will download and setup the SonarQube framework which can be access from 'http://127.0.0.1:9000'
  4. After that run executeScanner.py (python3 executeScanner.py), this will ask for your GIT repository that you want to scan.
  5. Access the results on SonarQube Portal('http://127.0.0.1:9000')

Screenshots

Downloading SonarQube and SonarScanner

Downloading SonarQube and SonarScanner

SonarQube is up and running

SonarQube is Up and Running

Executing Scanner

Executing SonarScanner

Scanning Started

SonarScanning Started

Scanner Execution Successful

Scanner Execution Successful

Results showing in SonarQube Dashboard

Results showing in SonarQube Dashboard

Collaborators

  • Malkit Singh
  • Shubham Shubhankar Sharma
Download Tool