GitLab

SonarQube Cloud's integration with GitLab allows you to maintain code quality and security in your GitLab projects.

To get started analyzing your GitLab projects with SonarQube Cloud, see Getting started with GitLab.

Key features

With SonarQube Cloud’s integration with GitLab, you’ll be able to:

• Authenticate with GitLab (through OAuth authentication).
• Import your GitLab group and its projects into SonarQube Cloud to easily set up SonarQube Cloud projects. The bulk import of all existing repositories is supported.
• Use automatic analysis to analyze eligible gitlab.com projects directly from the repository, without configuring GitLab CI/CD. Automatic analysis analyzes the default branch and merge requests. See Automatic analysis for eligibility and limitations.
• Analyze projects with GitLab CI/CD. SonarScanners running in GitLab CI/CD jobs can automatically detect branches or merge requests being built. You can fail the job if the SonarQube quality gate fails.
• Report your quality gate status to your branches and merge requests (merge request decoration). You can see your quality gate and code metric results right in GitLab so you know if it’s safe to merge your changes. You can prevent merges when the quality gate fails.
• Import your monorepo into SonarQube Cloud to easily manage the related projects.

You can use CI-based analysis from Self-hosted GitLab CI pipelines. However, since there is no native DevOps binding to Self-hosted GitLab in SonarQube Cloud (only to gitlab.com), the following features are not supported:

• Direct sign-up to SonarQube Cloud using Self-hosted GitLab OAuth. Note that you can integrate your Self-hosted GitLab authentication indirectly by using Single Sign-On.
• GitLab group and repositories import.
• Automatic analysis.
• Merge request decoration.

Related pages

• Automatic analysis

• Getting started with GitLab

• Importing GitLab group

• GitLab CI

• Creating a project manually