How to Generate a SonarQube Report Including Vulnerabilities and Hotspots for DD Ingestion?

I'm trying to generate a sonarqube report that includes both security vulnerabilities and hotpots (like the default import for the sq api import). But I see they are now in 2 differents endpoints /issues and /endpoints. Do you guys make 2 separates calls and 2 differents import to dd task in your pipeline? Does someone could show me an example of your call to sq to generate a sq report that dd can ingest? I thought of using soprasteria, but some people talking about issues with it, does someone know if its a reliable tool? Thanks a lot!