Automate SonarCloud code scans using GitHub Actions

#sonarcloud #githubactions #codequality

SonarCloud is a static code analysis service that automates code scanning for 24 mainstream programming languages and frameworks including C#, Java, Python, TypseScript, JavaScript, Go, Kotlin, etc. In this video, we see how to set up automated code scans using GitHub Action workflow.

▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬

▬▬▬▬▬▬ ⏱ Chapters⏱ ▬▬▬▬▬▬
00:00 - Introduction
0:46 - What is SonarCloud?
2:45 - How to integrate with SonarCloud?
4:25 - Configure Token
5:35 - Enable Github Action for GitHub repository
6:20 - Sonarcloud Github Action repo
8:10 - Add workflow definition to project
10:10 - Add SonarCloud token as secret in Github project
12:20 - Trigger Github action on source code check-in
13:50 - View different steps related to Github Action
14:20 - SonarCloud scan results
15:25 - Sonarcloud default scanners
16:45 - View scan results in SonarCloud portal
17:45 - Different categories in SonarCloud analysis
18:30 - Vulnerability levels
21:50 - SonarCloud rules
23:00 - Quality Gates
27:00 - Analyse external library Bootstrap using SonarCloud
28:35 - Summary

▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬
Connect with me here:

#GitHubActions #DevOps #SonarCloud #howto #demo #tutorial #tipsandtricks #codescan #StaticCodeAnalysis #GithubActionsCICD #QulityGates

[kalaivani]

Hi Sir, Your Automate SonarCloud code scans using GitHub Actions are very useful, Please try to continue your new video postings.

[mersy]

hi Sir I got this error "ERROR: You must define the following mandatory properties for 'Unknown': sonar.projectKey, sonar.organization", how can I fix it

[foongcheehao]

Hi. can i know where you get the sonar-cloud-scan.yml in visual studio?

[kreeve]

Thank you so much.
You omitted just one single thing. To make this procedure work, I had to go in the Administration panel on SonarCloud and disable the "Automatic Analysis" because of an error which said that I can't have both the Sonar Analysis and the CI analysis.
Honestly, I have no idea on what a CI analysis is and how to disable it. Online I didn't find anything useful. I will be so grateful if you can explain it to me.
Thanks again for the tutorial.

[thinkagain]

Can we configure sonal cloud in local visual studio before check in code?

[leejojose]

After setting the things, even I wrote testcase for controller, in overview dashboard coverage showing 0, why ?

[himanshuupadhayay]

Thank you for this Great lecture. Can you please tell me the difference between master and v1. 3 @10:00?
Thanks again