Overview
In this course, you'll learn how to enable SonarQube Hunter Agent, an add-on to SonarQube Cloud, Enterprise plan, that uses intent-based analysis to find access-control, business-logic, authentication, and session-management vulnerabilities. You'll run your first scan, review the results, and set up scheduled scans.
Learning objectives
After completing this course, you’ll be able to:
- Enable Hunter Agent.
- Run your first scan to detect vulnerabilities in your project's code.
- Review your first scan results.
- Enable scheduled scans.
- Configure scheduled scans.
Key topics
- SonarQube Hunter Agent
- Intent-based analysis
- Scan units
- Scan results
- Scheduled scans
- Best practices
Target audience
- Administrators
- DevOps engineers
- Developers
- Engineering leaders
Prerequisites
- An organization on the SonarQube Cloud, Enterprise plan.
- An organization bound to a supported DevOps platform (GitHub, GitLab, or Azure DevOps).
- The project you want to scan.
- The Administer Organization permission, to enable the agent for your organization and permit project administrators to enable scheduled scans.
- The Administer permission on the project, to enable the agent for the project, run analyses, and set up scheduled scans (when the organization allows it).