Is your feature request related to a problem? Please describe.
Currently, the CNES SonarQube report plugin generates reports in formats
(e.g., DOCX/XLSX) that can be freely edited after download. This creates a
trust and integrity issue — a "middle man" (e.g., a project manager, auditor,
or third party) can alter the findings before sharing with stakeholders,
undermining the authenticity of the security/quality report.
Describe the solution you'd like
Two enhancements are requested:
1. PDF Export Support:
Add an option to export the generated report in PDF format. PDF by nature
is harder to edit without specialized tools and leaves visible traces of
tampering, making it a more trustworthy format for sharing audit/quality
reports with clients, management, or compliance teams.
Optionally, support PDF signing or password protection to further
prevent unauthorized modifications.
2. SonarQube / CNES Logo in Reports:
Allow the generated reports (PDF or otherwise) to embed the official
SonarQube logo and/or CNES logo in the report header or cover page.
This adds credibility and clearly identifies the tool origin of the report,
which is especially useful in formal audits and compliance reviews
(e.g., ISO 27001, PCI-DSS).
Describe alternatives you've considered
- Manually converting DOCX/XLSX output to PDF after generation — this is
a workaround but adds friction and still allows pre-conversion editing.
- Using third-party PDF converters in CI/CD pipelines — introduces
additional dependencies and complexity.
- Watermarking existing output formats — does not fully prevent editing.
Is your feature request related to a problem? Please describe.
Describe the solution you'd like
Describe alternatives you've considered