Adding the SonarQube Cloud analysis to a Jenkins job

This section explains how to add the SonarCloud analysis to your Jenkins Freestyle or Pipeline jobs. Note that you can also easily configure and analyze your projects with Jenkins through the in-product tutorial.

To be able to add a SonarCloud analysis to a Jenkins job, Jenkins must have been set up for SonarCloud integration. 

Adding analysis to a Freestyle job

The procedure depends on the project type.

$SONAR_MAVEN_GOAL

sonar

Adding analysis to a Pipeline job

1. In Jenkins, create your Pipeline job.
2. Add the SonarCloud analysis stage to the Jenkins file: see below.
3. Setup a pipeline pause until the quality gate is computed.

Adding analysis to a Multibranch Pipeline job

1. In Jenkins, create your Multibranch Pipeline job.
2. From your Jenkins job, go to Configure > Branch Sources > Behaviors and:
   1. Under Discover branches, make sure Exclude branches that are also filed as PRs (or MRs) is selected.
   2. Under Discover pull (or merge) requests from origin, make sure The current pull (or merge) request revision is selected.
   3. Under Specify ref specs, make sure the Ref Spec value will include any target branches (the default value should be enough).
      If the Specify ref specs behavior is not active, click on Add and select Specify ref specs.
3. Add the SonarCloud analysis stage to the Jenkins file: see below.
4. Setup a pipeline pause until the quality gate is computed.

Adding an analysis stage to the Jenkins file

You must use the withSonarQubeEnv step in the SonarCloud analysis stage of your pipeline job. This step is used to set the environment variables necessary to connect to SonarCloud. The connection details are retrieved from the Jenkins global configuration.

The withSonarQubeEnv() method can take the following optional parameters:

• installationName (string): name of the SonarCloud installation as configured in Jenkins.
• credentialsId (string): if you want to overwrite the credentials configured in the Jenkins global configuration.
• envOnly (boolean): set it to true if you only want the SonarCloud environment variables to be expanded in the build context

Examples

Note that you don't need to specify an SCM stage in your Jenkins Pipeline or Multibranch Pipeline job.

node {
  stage('SonarCloud analysis') {
    withSonarQubeEnv() { // Will pick the global server connection you have configured
      sh './gradlew sonar'
    }
  }
}

node {
  stage('SonarCloud analysis') {
    withSonarQubeEnv(credentialsId: 'f225455e-ea59-40fa-8af7-08176e86507a', installationName: 'SonarCloud') { // You can override the credential to be used
      sh 'mvn org.sonarsource.scanner.maven:sonar-maven-plugin:3.11.0.3922:sonar'
    }
  }
}

node {
  stage('Build + SonarCloud analysis') {
    def sqScannerMsBuildHome = tool 'Scanner for .Net Framework'
    withSonarQubeEnv('SonarCloud') {
      bat "${sqScannerMsBuildHome}\\SonarQube.Scanner.MSBuild.exe begin /k:myKey"
      bat 'MSBuild.exe /t:Rebuild'
      bat "${sqScannerMsBuildHome}\\SonarQube.Scanner.MSBuild.exe end"
    }
  }
}

node {
  stage('SonarQube analysis') {
    def scannerHome = tool '<sonarqubeScannerInstallation>'; // must match the name of an actual scanner installation directory on your Jenkins build agent
    withSonarQubeEnv('SonarCloud') { 
      sh "${scannerHome}/bin/sonar-scanner"
    }
  }
}

pipeline {
  agent any
  stages {
    stage('SonarQube analysis') {
      steps {
        script {
            scannerHome = tool '<sonarqubeScannerInstallation>'// must match the name of an actual scanner installation directory on your Jenkins build agent
        }
        withSonarQubeEnv('SonarCloud') {
          sh "${scannerHome}/bin/sonar-scanner"
        }
      }
    }
  }
}