Configuring code analysis for SonarQube Server with Azure DevOps Pipelines and GitHub repositories

Time to complete icon1 hour to complete

Overview

This course provides a comprehensive guide to setting up automated code analysis using SonarQube Server with Azure Pipelines and GitHub repositories. By leveraging this integration, you can seamlessly embed crucial code quality and security checks into your development workflow to quickly identify issues and ensure higher standards for your codebase.

Learning objectives

After completing this course, you’ll be able to:

  • Describe the elements of an Azure pipeline structure.
  • Configure the connection between a GitHub repository and Azure Pipelines.
  • Define triggers in Azure Pipelines that automatically initiate code analysis with SonarQube Server upon changes to a GitHub repository.
  • Configure a pipeline workflow for code analysis with SonarQube Server.
  • Review SonarQube analysis results to understand code quality findings.
  • Customize your code analysis workflows for different project needs.
  • Apply troubleshooting tips to resolve common issues.

Key topics

  • Azure Pipelines integration with GitHub 
  • Configuring Azure DevOps 
  • Setting up a basic code analysis workflow in Azure Pipelines 
  • Initiating and reviewing your code analysis 
  • Applying SonarQube's code analysis across different programming languages 
  • Troubleshooting common issues 
  • Resources and best practices

Target audience

  • DevOps engineer
  • Developer
  • Engineering leader
  • Analyst

Prerequisites

  • SonarQube Server (Developer, Enterprise, or Data Center Edition)
  • Required SonarQube permissions
  • Server Base URL set in SonarQube 
  • Active GitHub account
  • Existing GitHub organization with at least one repository 
  • Active Azure DevOps account
  • Create and manage repository variables permission
  • Existing Azure DevOps organization with at least one project 
  • Network connectivity
  • SonarQube Server accessible via a public URL