Configuring code analysis for SonarQube Cloud with Bitbucket Cloud Pipelines

Overview

This course offers a comprehensive guide to integrating automated code analysis into your development workflow by leveraging Bitbucket Cloud Pipelines with SonarQube Cloud. You'll learn to set up automated code scanning directly within your Bitbucket Cloud repositories to identify issues early and ensure high standards for your codebase.

Learning objectives

After completing this course, you’ll be able to:

• Describe the elements of a Bitbucket pipeline structure.
• Define triggers in Bitbucket Pipelines that automatically initiate code analysis with SonarQube.
• Configure a Bitbucket Pipelines workflow for code analysis with SonarQube.
• Customize your code analysis workflows for different project needs.
• Apply troubleshooting tips to resolve common issues.

Key topics

• Benefits of automated code analysis
• Bitbucket Pipelines structure
• Configuring Bitbucket Pipelines with repository variables
• Setting up a basic code analysis workflow in Bitbucket Pipelines
• Initiating and reviewing your code analysis results
• Applying code analysis across different languages
• Troubleshooting common issues
• Resources and best practices

Target audience

• DevOps engineer
• Developer
• Engineering leader
• Analyst

Prerequisites

• Course: Initial SonarQube Cloud set up with Bitbucket
• SonarQube Cloud organization and project created
• SonarQube token (Free plan) or Scoped Organization token (Team plan or higher)
• Active Bitbucket Cloud account
• Bitbucket Administrative permission to create and manage repository variables
• SonarQube Execute Analysis permission
• SonarQube Create Projects permission
• Existing Bitbucket Cloud workspace with at least one project
• Network connectivity allowing communication between SonarQube Cloud and Bitbucket Cloud