Configuring code analysis for SonarQube Server with Azure DevOps Pipelines

Time to complete icon1 hour to complete

Overview

This course provides a comprehensive guide to integrating automated code scanning into your development workflow using Azure Pipelines and SonarQube. You will learn how to set up automated code scanning within your Azure DevOps repositories to identify issues early and maintain high standards for your codebase.

Learning objectives

After completing this course, you’ll be able to:

  • Describe the benefits and prerequisites for automated code analysis using Azure Pipelines and SonarQube.
  • Explain the elements of an Azure Pipeline's structure.
  • Set up triggers in Azure Pipelines that automatically initiate code analysis with SonarQube.
  • Configure an Azure Pipelines workflow for code analysis with SonarQube.
  • Review SonarQube analysis results to understand code quality findings.
  • Customize your code analysis workflows for different project needs.
  • Apply troubleshooting tips to resolve common issues.

Key topics

  • Benefits of automated code analysis
  • Azure Pipelines structure 
  • Configuring Azure DevOps 
  • Setting up a basic code analysis workflow in Azure Pipelines
  • Initiating and reviewing your code analysis results
  • Applyingcode analysis across different languages
  • Troubleshooting common issues 
  • Resources and best practices

Target audience

  • DevOps engineer
  • Developer
  • Engineering leader
  • Analyst

Prerequisites

  • Active Azure DevOps account
  • Existing Azure DevOps organization with at least one repository and one project
  • Endpoint Creator or Endpoint Administrator role in the Azure DevOps project to create the Service Endpoint 
  • SonarQube Server instance (Developer, Enterprise, or Data Center Edition)
  • SonarQube permissions, including Create Project global permission (or Administer permission of a project) and Execute Analysis 
  • SonarQube Analysis Token (global or project-scoped)  
  • The Server Base URL set in SonarQube
  • Network connectivity allowing communication between SonarQube Server and Azure DevOps