Configuring code analysis for SonarQube Cloud with GitHub Actions

Overview

This course provides a comprehensive guide to setting up automated code scanning directly within your GitHub repositories. You'll learn how to define triggers for code analysis, configure the SonarQube Scanner, and interpret your code analysis results by integrating GitHub Actions with SonarQube.

Learning objectives

After completing this course, you’ll be able to:

• Define triggers for code analysis.
• Configure a GitHub Actions workflow for code analysis with SonarQube.
• Review SonarQube analysis results.
• Customize your code analysis workflows for different project needs.
• Apply troubleshooting tips to resolve common issues.

Key topics

• GitHub Actions pipeline structure (workflows, jobs, and steps)
• Setting up a basic code analysis workflow in GitHub
• Reviewing code analysis results in SonarQube
• Applying SonarQube's code analysis across different programming languages
• Troubleshooting common issues
• Best practices and resources

Target audience

• DevOps engineer
• Developer
• Engineering leader
• Analyst

Prerequisites

• Complete the initial SonarCloud set up with GitHub
• SonarQube Cloud organization and project
• SonarQube token
• Active GitHub account
• Existing GitHub organization with at least one repository
• Administrator permissions to create and manage repository secrets and variables in GitHub
• Administrator permissions to create and update a GitHub Actions workflow
• Network connectivity between SonarQube Server and GitHub