Integration with DevOps platforms

SonarQube Cloud integrates with GitHub, Bitbucket Cloud, GitLab, and Azure DevOps to streamline code quality analysis and security into your DevOps pipelines. 

This integration allows you to import your DevOps platform organization and its repositories into SonarQube Cloud, automatically binding SonarQube Cloud projects to their corresponding DevOps platform repositories. The integration also enables features like automatically triggering analysis in your CI/CD pipeline, displaying quality gate status in your DevOps pipeline, and preventing merges when the quality gate fails. 

By default, users can authenticate to SonarQube Cloud with their existing credentials on their DevOps platform service (no additional setup is required). With the DevOps platform service authentication, Just-in-Time user provisioning is used.

GitHub

SonarQube Cloud's integration is supported with GitHub plans running on the github.com domain.

With this integration, you'll be able to:

• Authenticate with GitHub (through the SonarQube Cloud GitHub application).
  Automatic member synchronization is supported.
• Import your GitHub organization and its repositories into SonarQube Cloud to easily set up SonarQube Cloud projects.
• Analyze projects with GitHub Actions.
  SonarScanners running in GitHub Actions jobs can automatically detect branches or pull requests being built.
  You can fail the job if the SonarQube quality gate fails.
• Report your quality gate status to your branches and pull requests.
  You can see your quality gate and code metric results right in GitHub so you know if it's safe to merge your changes. You can prevent pull request merges when the quality gate fails.
• Import your monorepo into SonarQube Cloud to easily manage the related projects.

Bitbucket Cloud

With SonarQube Cloud's integration with Bitbucket Cloud, you'll be able to:

• Authenticate with Bitbucket Cloud (through OAuth authentication).
• Import your Bitbucket workspace and its repositories into SonarQube Cloud to easily set up SonarQube Cloud projects.
• Analyze projects with Bitbucket Pipelines.
  SonarScanners running in Bitbucket Pipelines can automatically detect branches or pull requests being built.
  You can fail the pipeline if the SonarQube quality gate fails.
• Report your quality gate status to your branches and pull requests.
  You can see your quality gate and code metric results right in Bitbucket Cloud so you know if it's safe to merge your changes. You can prevent pull request merges when the quality gate fails.
• Import your monorepo into SonarQube Cloud to easily manage the related projects.

GitLab

With SonarQube Cloud's integration with GitLab, you'll be able to:

• Authenticate with GitLab (through OAuth authentication).
• Import your GitLab group and its repositories into SonarQube Cloud to easily set up SonarQube Cloud projects.
• Analyze projects with GitLab CI/CD.
  SonarScanners running in GitLab CI/CD jobs can automatically detect branches or pull requests being built.
  You can fail the job if the SonarQube quality gate fails.
• Report your quality gate status to your branches and pull requests.
  You can see your quality gate and code metric results right in GitLab so you know if it's safe to merge your changes. You can prevent pull request merges when the quality gate fails.
• Import your monorepo into SonarQube Cloud to easily manage the related projects.

Azure DevOps

SonarQube Cloud's integration is supported with both Azure DevOps Server and Azure DevOps Services.

With this integration, you'll be able to:

• Authenticate with Azure DevOps (through OAuth authentication).
• Import your Azure DevOps organization and its repositories into SonarQube Cloud to easily set up SonarQube Cloud projects.
• Analyze projects with Azure Pipelines.
  SonarScanners running in Azure Pipelines can automatically detect branches or pull requests being built.
  You can fail the pipeline if the SonarQube quality gate fails.
• Report your quality gate status to your branches and pull requests.
  You can see your quality gate status right in Azure Pipeline's Build Summary page. Issues detected on pull requests are displayed on the Azure DevOps pull request. You can prevent pull request merges when the quality gate fails.
• Import your monorepo into SonarQube Cloud to easily manage the related projects.

Related pages

• Getting started with GitHub
• Getting started with Bitbucket Cloud
• Getting started with GitLab
• Getting started with Azure DevOps