Overview
This comprehensive guide provides a complete framework for setting up automated code scanning by integrating SonarQube Cloud with your GitLab CI/CD workflow. By the end of the course, you'll be able to seamlessly embed code quality and security checks directly into your development workflow to catch issues early and ensure a higher standard for your codebase.
Learning objectives
- Describe the prerequisites for automated code analysis using GitLab CI/CD and SonarQube Cloud
- Explain the benefits of automated code analysis with GitLab CI/CD and SonarQube
- Describe the elements of a GitLab CI/CD pipeline structure
- Define triggers in GitLab CI/CD that automatically initiate code analysis with SonarQube
- Configure a GitLab CI/CD workflow for code analysis with SonarQube
- Review SonarQube analysis results to understand code quality findings
- Customize your code analysis workflows for different project needs
- Apply troubleshooting tips to resolve common issues
Key topics
- Understanding GitLab CI/CD structure
- Configuring GitLab CI/CD
- Setting up a basic code analysis workflow in GitLab CI/CD
- Initiating code analysis results
- Applying SonarQube's code analysis across languages
- Troubleshooting common issues
Target audience
- DevOps engineer
- Developer
- Engineering leader
- Analyst
Prerequisites
To ensure a smooth setup, you must have the following in place:
- Complete the initial SonarCloud setup with GitLab (it's recommended to review the Initial SonarQube Cloud setup with GitLab CI/CD course)
- Create a SonarQube organization and a project
- Generate a SonarQube token (Free plan) or Scoped Organization token (Team plan or higher)
- Have an active GitLab account
- Possess administrative permissions in GitLab to create and manage repository variables
- Obtain an existing GitLab group with at least one repository
- Ensure there is network connectivity allowing communication between SonarQube Cloud and GitLab (check firewalls and proxies)