Creating scoped organization tokens in SonarQube Cloud

Overview

This course explains how to use SonarQube Cloud scoped organization tokens to manage secure, automated code analysis across your projects. It covers the purpose of these tokens and how to generate them within SonarQube.

Learning objectives

After completing this course, you’ll be able to:

• Understand the purpose of scoped organization tokens.
• Generate a scoped organization token in SonarQube Cloud.
• Identify where to save the generated token for secure use in CI/CD.
• Manage an existing scoped organization token.
• Explain the security and administrative reasons for revoking a token.

Key topics

• Purpose of scoped organization tokens 
• Difference between scoped organization tokens and global organization tokens
• Token management process
• Steps for creating a scoped organization token
• Token usage in CI/CD workflows

Target audience

• Administrator
• DevOps engineer
• Developer

Prerequisites

• Access to a SonarQube Cloud instance
• Organization administrator on a SonarQube Cloud Team or Enterprise plan
• Access to a password manager or CI/CD secret store