Sonarqube Complete Tutorial 2023

[@lingrajbiradar4416]

two days back asked you to create video on sonarqube and here it is already.. 😀 Thank you so much brother..🤩

[@prakashkchauhannn]

It was straightforward to understand hands-on. Thank you.

[@devopsshack]

Hey man, thanks for watching ✌🏻

[@riyazbasha2420]

I really appreciate your hard work and the way of teaching. Thanks!

[@sandeepkumararya9949]

One stop for the complete Sonar. Clearly explain. thanks.

[@generalgyan8705]

Nice Bro. Beautifully explained..

[@shreyasdevarkar8289]

Nice work! Personal pov - On the SonarQube stage of the pipeline a tad more details would have made things simpler for me.

[@anishkumarswar3163]

Aree bhaiya kya baat hai, 1 no.... Itne jldi... Bhai will suggest weekend main 1 hour or 2 hour live session lijiye if anyone having any doubt regards on the uploaded vdo then will clarify.. Will be help us.. Thank you Bhai for actively doing and appreciate ur effort❤

[@devopsshack]

Share the videos as well🥺 Need a bigger audience ✌🏻

[@OsccarMartinez-oo1or]

it was helpful man, thank you so much!!!

[@nandanhj2615]

This video is very helpful:) Thanks

[@Shreenidhi110]

Clear explanation,thank you

[@Cloudnp9458]

We have source code, there might be some syntax based error, vulnerabilities in our code, code smells. To make sure code is free of all this and pin point at particular line which has issues, we use sonarqube. It does two things... 1. Code coverage - code coverage 80% means that amount of code is tested.. 2. Code quality check- code quantity determined by 1.Due to bug(wrong code), 2.vulnerability(section of code which is open to attack), 3. code smell(that section of code which is poorly written and create confusion). Why sonarqube is used, it is compatible with nodejs, java, python, c sharp all of these source code.

[@niharuoriannagrande4144]

ty very much, subscribed !

[@lingrajbiradar4416]

amazing video☺

[@sobankhan7517]

Thanks Sir, love from Pakistan

[@shrikanthmr3711]

20:25 those properties plugins and dependency files are written by devops engineers?

[@PrinceGupta-t1v]

How to delete older scan in the SonarQube, we need to explore any API details which can delete bulk scan on the basis of date range or any details

[@grandlimine464]

Hi, can you please show same pipeline but with docker containers? How to build docker-compose.yaml file for each tool? (jenkins, sonarqube)

[@mortalbm]

that was awesome! thanks.

[@alwaha4283]

Good video ❤

[@devopsshack]

Thanks 😁

[@markdarwinvillarta3768]

Thank you brother for a timely tutorial on this, love from Philippines ! Already subscribe, Maybe you can do sonarqube AD or LDAP integration

[@devopsshack]

Sure will try

[@connectwithanandsuresh]

HI Aditya - How do we fail the pipeline when the code is failed to coverage > 80 % or having some vulnerabilities? And how do we share the sonar report in real-time?

[@pranay.mahakalkar]

Hi Aditya. Que: What are the common vulnerabilities you have seen so far? Thank you in advance.

[@EgatturCricketClub]

Is sonarqube and checkov tool serve the same purpose. If not, Can you please let me know when to use both the tools

[@devopsumman7364]

How to check Date and time of completion at the sonarqube homepage for Pull Request jobs, in current version 10.2.1 date and time is not appearing and not finding at other positions. Thanks in Advance for the support.

[@DileepK-li1ig]

What are configuration for dotnet core project code coverage?

[@Roman69245]

If you experience errors on the maven - sonarqube connection, change the "localhost" of sonarqube to your machine's IP and check that the JDK version you put into Jenkins is the same as the version on your machine.

[@bharaniS-o4y]

bro where i will get that dependency properties and plug in file bro

[@nitishmalang4844]

bro make video on kubernetes architecture btw 😇 this sonarqube tutorial was awesome

[@pragadeesh9044]

Need help on AWS EC2 - Sonarqube Setup video. I am using gitlab, pipeline is failing with sonaruqube xxxx:xxxx cannot be reached. I am able to curl in Ec2 instance and in browser it is working.

[@Mudassir.realme]

Is this the complete tutorial on sonarqube ? Or should i have to learn more and more ?? Or this much is enough ? Please reply

[@novicecoder5753]

Hey, the tutorial is interesting but I have some doubts and feedback 1)If project creation is also included it would be nice even though shell command does this thing. 2)You geberated a token under your profile section. But i generated the token from the project creation manually is it ok. And another thing is can i use same token that i generated for single project is it ok. 3)You configured the tools maven and sonar scanner but if i dont want to perform analysis on jenkins master then configuring them is not correct right. I mean basically we are using the node and perform the analysis on jenkins node. so in this scenario i need to manually install them in the jenkins node am i right. 4)Finally is this enough for a devops engineer? Thanks ❤ for the video

[@ankitsono8701]

It is necessary to create a testcase and and the code coverage is based on testcase right ?

[@kommisettydinesh7342]

Hello sir. Thanks for sharing your knowledge. can you pls make a video with NodeJS application also.

[@yaseenbaba3389]

Excellent!. Can we mask the passwords where ever is required ? Like using IAM or secrets in-place And in issues section you said assigned to specific persons for fixing, Will it be assigned to the developer who has pushed to feature branch after their coding task ? Please if possible do a video on Gerrit tool.

[@devopsshack]

We can mask , yess And the issues are assigned to developers

[@mohanmurali7975]

Bro after generating this how do we pass it developers end so that they can rectify them

[@arozendojr]

How to create a branch, using production, ignore the entire production base, analyze only the new commits?

[@RaviKishan-n2m]

in my project quality gate unable to applied project in sonarqube after run command "npm run sonar"

[@burunonono]

Please refrain from using the phrase 'OK' habitually. Thank you.

[@devopsshack]

Ok😂😂😂

[@gimhanranasinghe336]

Dose sonarscanner support .NET 7. ?

[@rahil7861]

When I am using Jenkins and Sonarqube docker containers and try to run pipeline in Jenkins. The console output showing me no Sonarqube Scanner Tool found. But I have already added the plugins of Scanner in my Jenkins. Could you help me out to fix this issue?

[@devopsshack]

U may not have added sonar server

[@rahil7861]

I did added it but still its not working. Also i have referred different article on medium and they have said that you need to install sonarcube scanner through apt-get install command in jenkins container. I did this too, but no luck.@@devopsshack

[@ManiBalajiC]

Why didn't you configure the SonarQube container in the global systems , you just used the tool configuration. ??

[@dilushaalphonso9626]

can you please add any testing tool integration in CI/CD pipleline (Selenium)

[@devopsshack]

Okay

[@newrock_]

everything is good but how to install and how to setup sonar

[@maazmohd7244]

Are you running Jenkins & sonar on the same machine, does both can be setup on free-tire.

[@devopsshack]

I use t2.large if multiple things i need to setup

[@gollarambabu3317]

sonarqube not working localhost in windows and Jenkins working

[@paramvirrotwal2428]

How to make pom.xml file for python applications like for fastAPI

[@sujethapai5127]

pls make video on prometheus and grafana..

[@devopsshack]

In future, yes✌🏻

[@sujithexcellence]

@@devopsshackwaiting 🎉

[@prakashkchauhannn]

Overall it is a very good video but when I tried to integrate a Jenkins pipeline with Sonar it failed. After a long debug found that Project creation on sonar is missing in this video. Try to add this part as well. Thank you.

[@devopsshack]

-Dsonar.projectName=projectname When u put this in shell command the project gets created which I already showed in video🙂

[@prakashkchauhannn]

@@devopsshack true, apologies I have missed that part.

[@kiran.on.devops]

unable to start the sonarqube, connection timeout

[@govindsharma7194]

Hello There, Is is possible ? we can setup sonar qube without docker ?

[@rahil7861]

yes, plain installation is also available but you need 2vCpus and 2 gb ram minimum to install it

[@abhishekghadage8085]

My sonarqube server is not running any reason

[@rahulray7683]

How to show multiple branch on Sonarcube

[@devopsshack]

That feature available in developer edition

[@sureshpolisetty8938]

bro faceing an issue with sonarqube page while copying the ipv4 public:9000 then it didn't connect to sonarqube page, so what is the error? how can I correct it.

[@devopsshack]

Check in security group if port is open

[@sureshpolisetty8938]

ok bro@@devopsshack

[@ganespandikaputra6787]

how to generate report???? please help me

[@oussamabadreddine6529]

Why Run SonarQube in Docker?

[@SirJi-m6w]

unable to connect to localhost /9000 error ara hai reply bhi kr dia kr bhai, khali video bna di hai

[@90sfavdubbedserials]

How to delete a brand in sonarqube

[@bhargavkrishna8767]

Bro need some suggestions from you. How can I reach you ,

[@devopsshack]

Hey Krishna, I am available at instagram.com/m_aditya_jaiswal?igshid=NTc4MTIwNjQ2YQ==

[@gybvarnakeri]

If you get rid of "okay", you will be the champion !!! okay?

[@devopsshack]

Okay 🙂

[@mudavathswathi-j5g]

u got one follwer while pronouncing vulnerabilities😄

[@devopsshack]

😅🙏

[@LUFI-Munki]

Okay

[@jayakumar2927]

audio not clear

[@devopsshack]

😢😢

[@mridulsingh1399]

Bro please work at your sound quality your content is on-point but the voice makes it underrated!!

[@devopsshack]

In new videos they are improved buddy

[@navya932]

Error: LinkageError occurred while loading main class org.sonar.application.App java.lang.UnsupportedClassVersionError: org/sonar/application/App has been compiled by a more recent version of the Java Runtime (class file version 61.0), this version of the Java Runtime only recognizes class file versions up to 55.0