Sonarqube Complete Tutorial 2023

Sonarqube Complete Tutorial 2023

DevSecOps & Cloud DevOps Full Course(Batch-2 Starting 20th October):

If you have any questions or suggestions, Please ping me one to one on Instagram at:

Repo Used:

Tools Used:
1. Sonarqube
2. Jenkins
3. Docker
4. JDK11, Maven

Timestamps:

00:23 Agenda
00:42 Sonarqube explanation
08:13 Install & Setup Sonarqube
12:09 How Sonarqube works
17:18 Implementation With Jenkins
20:40 Creating Jenkins Pipeline
27:12 Analysis Complete | Check the report in Sonarqube

[lingrajbiradar]

two days back asked you to create video on sonarqube and here it is already.. 😀 Thank you so much brother..🤩

[sandeepkumararya]

One stop for the complete Sonar. Clearly explain. thanks.

[Cloudnp]

We have source code, there might be some syntax based error, vulnerabilities in our code, code smells.
To make sure code is free of all this and pin point at particular line which has issues, we use sonarqube.
It does two things...

1. Code coverage - code coverage 80% means that amount of code is tested..
2. Code quality check- code quantity determined by
1.Due to bug(wrong code), 2.vulnerability(section of code which is open to attack), 3. code smell(that section of code which is poorly written and create confusion).


Why sonarqube is used, it is compatible with nodejs, java, python, c sharp all of these source code.

[anishkumarswar]

Aree bhaiya kya baat hai, 1 no....
Itne jldi...
Bhai will suggest weekend main 1 hour or 2 hour live session lijiye if anyone having any doubt regards on the uploaded vdo then will clarify..
Will be help us..
Thank you Bhai for actively doing and appreciate ur effort❤

[riyazbasha]

I really appreciate your hard work and the way of teaching. Thanks!

[prakashkchauhannn]

It was straightforward to understand hands-on. Thank you.

[shreyasdevarkar]

Nice work!
Personal pov - On the SonarQube stage of the pipeline a tad more details would have made things simpler for me.

[markdarwinvillarta]

Thank you brother for a timely tutorial on this, love from Philippines ! Already subscribe, Maybe you can do sonarqube AD or LDAP integration

[mohanmurali]

Bro after generating this how do we pass it developers end so that they can rectify them

[dzlyvqj]

Is this the complete tutorial on sonarqube ? Or should i have to learn more and more ?? Or this much is enough ? Please reply

[ganespandikaputra]

how to generate report???? please help me

[novicecoder]

Hey, the tutorial is interesting but I have some doubts and feedback
1)If project creation is also included it would be nice even though shell command does this thing.
2)You geberated a token under your profile section. But i generated the token from the project creation manually is it ok. And another thing is can i use same token that i generated for single project is it ok.
3)You configured the tools maven and sonar scanner but if i dont want to perform analysis on jenkins master then configuring them is not correct right. I mean basically we are using the node and perform the analysis on jenkins node. so in this scenario i need to manually install them in the jenkins node am i right.
4)Finally is this enough for a devops engineer?

Thanks ❤ for the video

[EgatturCricketClub]

Is sonarqube and checkov tool serve the same purpose. If not, Can you please let me know when to use both the tools

[abhishekghadage]

My sonarqube server is not running any reason

[iesphzw]

in my project quality gate unable to applied project in sonarqube after run command "npm run sonar"

[pranay.mahakalkar]

Hi Aditya. Que: What are the common vulnerabilities you have seen so far?

Thank you in advance.

[ManiBalajiC]

Why didn't you configure the SonarQube container in the global systems, you just used the tool configuration. ??

[newrock_]

everything is good but how to install and how to setup sonar

[ankitsono]

It is necessary to create a testcase and and the code coverage is based on testcase right ?

[nitishmalang]

bro make video on kubernetes architecture
btw 😇 this sonarqube tutorial was awesome