By now, you should have Sonatype CLM for SonarQube installed, and you should be seeing information from the corresponding Application Composition Report. There really isn’t much more to it, and now you have seamless analysis of your open source component usage right inline with all the information provided by SonarQube.

Just to recap, here are a few of the topics covered regarding the Sonatype CLM for SonarQube: