Please upgrade sonarqube to 7.5 and add dependency check plugin like here: https://github.com/ostseekind/AppSec.Sonarqube/blob/master/Dockerfile