Automate Static Code Quality Analysis with SonarCloud from Jenkins
- Login to https://sonarcloud.io/
- Click on SCM tool
Depending on your SCM tool, We will use GitHub. So please click on it.
Enter GitHub credentials to setup your account in SonarCloud. Click Authorize SonarQube Cloud.
Go to SonarCloud → My Account → Organizations → Create/Select organization
Choose “Import from GitHub” (or connect GitHub) and Install the SonarCloud GitHub App
Start analyzing a project:
Check any one of the options to confirm what is new code:
Select with other CI tools
Select Maven, note organization key, project key and token.
Pre-requisites in Jenkins:
- SonarQube plug-in - Make sure this plug-in is installed.
- pipeline stage view plug-in
Enter Sonar token as secret text and select it from the drop down
Jenkins Pipeline code for running scan in SonarCloud
node {
def mvnHome = tool 'Maven3'
stage ("checkout") {
stage ('build') {
sh "${mvnHome}/bin/mvn clean install -f MyWebApp/pom.xml"
}
stage ('Code Quality scan') {
withSonarQubeEnv('SonarCloud') {
}
def mvnHome = tool 'Maven3'
stage ("checkout") {
git branch: 'main', credentialsId: '', url: 'https://github.com/akannan1087/my-javawebapp-repo'
}stage ('build') {
sh "${mvnHome}/bin/mvn clean install -f MyWebApp/pom.xml"
}
stage ('Code Quality scan') {
withSonarQubeEnv('SonarCloud') {
sh """
${mvnHome}/bin/mvn -f MyWebApp/pom.xml \
org.sonarsource.scanner.maven:sonar-maven-plugin:4.0.0.4121:sonar \
-Dsonar.organization=org_key \
-Dsonar.projectKey=com.dept.app:MyWebApp \
-Dsonar.projectName=MyWebApp
"""
}}
}
Now login to SonarCloud under --> https://sonarcloud.io/projects
Here is the pipeline view:
Watch steps in YouTube Video:
