Configuring code analysis for SonarQube Cloud with Azure DevOps Pipelines

Overview

This course provides a comprehensive guide to integrating automated code scanning into your development workflow using Azure Pipelines and SonarQube Cloud. You will learn how to set up automated code scanning within your Azure DevOps code repositories to identify issues early and maintain high standards for your codebase.

Learning objectives

After completing this course, you’ll be able to:

• Define triggers in Azure Pipelines that automatically initiate code analysis with SonarQube.
• Configure an Azure Pipelines workflow for code analysis with SonarQube.
• Review SonarQube analysis results to understand code quality findings.
• Customize your code analysis workflows for different project needs.
• Apply troubleshooting tips to resolve common issues.

Key topics

• Benefits of automated code analysis
• Azure Pipelines structure 
• Configuring Azure DevOps 
• Setting up a basic code analysis workflow in Azure Pipelines
• Initiating and reviewing your code analysis results
• Applying code analysis across different languages
• Troubleshooting common issues 
• Resources and best practices

Target audience

• DevOps engineer
• Developer
• Engineering leader
• Analyst

Prerequisites

• Complete the course: Initial SonarQube Cloud set up with Azure DevOps
• SonarQube Cloud organization and project created
• SonarQube token (Free plan) or Scoped Organization token (Team plan or higher)
• Active Azure DevOps account 
• Endpoint Creator or Endpoint Administrator role in the Azure DevOps project to create the Service Endpoint 
  
• SonarQube Execute Analysis permission (organization level or project level)
• SonarQube Create Projects permission (organization level) or Administer permission (project level)
• Existing Azure DevOps organization with at least one repository and one project
• Network connectivity allowing communication between SonarQube Server and Azure DevOps