Add more description about code quality & security

CONTRIBUTING.md

@@ -13,23 +13,23 @@ The following commands support you at developing good code:
 * `npm run test`: Run the tests
 * `npm run lint`: Run the linter
 
-### Static code analysis
-#### SonarQube
-##### Local
-* `docker-compose up -d`: Start the sonarqube container. This will take some time.
-* `docker-compose stop`: Stop the container
-* `docker-compose down`: Remove the container
+## Quality Gateway
 
-SonarQube will be reachable on `http://localhost:9000`.
-
-* `npm run sonar`: Start sonarscanner and upload result to local container
-
-##### SonarCloud
+### SonarCloud
 Find analysis on [sonarcloud.io](https://sonarcloud.io/project/overview?id=pascalre_vscode-yaml-sort)
 
-#### DeepSource
+### DeepSource
 Find analysis on [deepsource.io](https://deepsource.io/gh/pascalre/vscode-yaml-sort)
 
+### CodeFactor
+[![CodeFactor](https://www.codefactor.io/repository/github/pascalre/vscode-yaml-sort/badge/master)](https://www.codefactor.io/repository/github/pascalre/vscode-yaml-sort/overview/master)
+
+Find analysis on [codefactor.io](https://www.codefactor.io/repository/github/pascalre/vscode-yaml-sort/overview/master)
+
+
+## Security
+Find analysis on [snyk.io](https://app.snyk.io/org/pascalre/project/e7d5ea5f-b9ee-426e-9f91-4c910a742838)
+
 ### Commit changes
 Refer to [this blogpost](https://cbea.ms/git-commit/#end) by cbeams when committing changes. Issue numbers can be added in braces to the end of the commit message.