Missing rules warning when integrating with Sonarqube about zap-sonar-plugin

[thc202]

This could be merged into #21 (or the other into this one).

Note that you can add those rules already: https://github.com/Coveros/zap-sonar-plugin#plugin-configuration
For reference #4.

[OtherDevOpsGene]

I see 10027 in there now. I do not see 40029.

I searched the zaproxy source, but couldn't find anything other than a mention that it is for the trace.xsd Scanner. No text, description, documentation, etc. Does anyone know where that comes from?

[thc202]

Right, 10027 was added in #23. Raised a PR (#29) to add the other two rules.

The scanners (passive and active) are provided through add-ons, most of them are in the zap-extensions repo but some are provided by 3rd parties which use their own repos. The best would be to generate the rules from the report (as the TODO indicates), for example, some of the scanners raise slightly different issues which the current rules file does not handle.