GitHub
SonarQube Cloud's integration with GitHub allows you to maintain code quality and security in your GitHub repositories.
To get started analyzing your GitHub projects with SonarQube Cloud, see Getting started with GitHub.
SonarQube Cloud’s integration is supported with GitHub plans running on the github.com domain, on the ghe.com domain used for GitHub Enterprise Cloud with Data Residency, and on GitHub Enterprise Server (GHES).
Key features
With this integration, you’ll be able to:
Authenticate with GitHub.com through the SonarQube Cloud GitHub application. Automatic member synchronization is supported only for GitHub.com organizations.
Import your GitHub organization and its repositories into SonarQube Cloud to easily set up SonarQube Cloud projects. The following additional features are supported:
The auto-import of new GitHub repositories.
The bulk import of all existing repositories.
The automatic analysis of the projects’ main branch.
Analyze projects with GitHub Actions. SonarScanners running in GitHub Actions jobs can automatically detect branches or pull requests being built. You can fail the job if the SonarQube quality gate fails.
Report your quality gate status to your branches and pull requests. You can see your quality gate and code metric results right in GitHub so you know if it’s safe to merge your changes. You can prevent pull request merges when the quality gate fails.
Display security issues found by SonarQube Cloud as code scanning alerts in the GitHub interface (not yet supported with GHE.com Cloud or GHES).
Import your monorepo into SonarQube Cloud to easily manage the related projects.
Authentication and member access
The GitHub login option and GitHub member synchronization support GitHub.com only. For GHE.com and GHES, use SSO. See Importing GHE.com Cloud organization or Importing GHES organization.
Related pages
Last updated
Was this helpful?