Azure DevSecOps | Integrate Sonarqube with Azure Pipeline to run Static Code Analysis

In this Videos we are going to discuss about sonarqube and how to integrate sonarqube into azure DevOps YAML pipelines. In the demo, I have run the Static Code Analysis (SCA) on ASP.Net Core application and then by using gates and approvals deployed the web app into Azure App service.

SonarQube is an open-source tool that assists in code quality analysis and reporting. It scans your source code looking for potential bugs, vulnerabilities, and maintainability issues, and then presents the results in a report which will allow you to identify potential issues in your application.

How to install Sonarqube:

[harishh]

Please make video on How to deploy docker images on AKS using Azure CICD pipeline .

[srilatha]

Awsesome content. please provide github repo link.

[xqkiyfv]

After pipeline run and deploying into webapp, if want to add one more task in pipeline can we add in same pipeline ?

[michellecortes]

do you have a video on how to set up the azure vm for sonarqube?

[abinashmishra]

6. Setup Systemd service

getting the error
● sonar.service - SonarQube service
Loaded: bad-setting (Reason: Unit sonar.service has a bad unit file setting.)
Active: failed (Result: protocol) since Thu 2022-05-05 04:43:58 UTC; 11min ago

please help with this. Is there any modification needed in the service file ?