Lyle Barner

> * Related to [the question above](https://github.com/NASA-AMMOS/slim/issues/25#issuecomment-1452306898), do you have recommendations for how to filter for a smaller sample of SCRUB scanning results such that SCRUB can run tools like...

@jpl-jengelke would it be possible to perform SCRUB analysis in parallel with test activities? From a technical point of view, SCRUB only needs the source code itself (and compiled outputs...

SonarQube requires that an analysis be performed before third-party SARIF results can be uploaded. This may cause issues with upload time for large codebases.

VS Code extension [SARIF Viewer](https://marketplace.visualstudio.com/items?itemName=MS-SarifVSCode.sarif-viewer) allows users to import SARIF results and review with code. Placing SARIF files at the source root directory simplifies the import process.