Issues reported in Azure DevOps
SonarQube Cloud reports issues on your Azure DevOps pull requests.
Last updated
Was this helpful?
SonarQube Cloud reports issues on your Azure DevOps pull requests.
When you run a SonarQube Cloud analysis for a pull request, each SonarQube issue is displayed as a comment on the Azure DevOps pull request. If you change the status of an issue in SonarQube Cloud, that status change is immediately reflected in the Azure DevOps interface.
The number of comments posted in the timeline of a pull request is limited to 50. If this limit has been reached, a message will be displayed as a comment, with a link to the rest of the issues on SonarQube Cloud. This comment will not disappear upon resolution of an issue, but only upon a new build, with less than 50 issues remaining.
Pull request decoration is only supported with a bound project and requires that pull request integration be correctly configured for your project. See Configuring Azure DevOps project binding for more details.
For Azure DevOps pull request decoration, a legacy project-level personal access token (PAT) can take precedence over the organization-level PAT. If the project-level PAT has expired or been revoked, the SonarCloud/quality gate status may remain in a Waiting state and pull request decoration may not be posted, even though the organization is correctly bound.
To clear the legacy project-level PAT:
Make sure the organization-level PAT has the Azure DevOps Code (read & write) scope.
Go to your project's Administration > General Settings > Pull Requests. If the Legacy project-level PAT detected warning is shown, select Clear project-level PAT and confirm.
Trigger a new pipeline run on the pull request and check that the decoration is posted.
After the project-level PAT is reset, pull request decoration uses the organization-level PAT. You don't need to unbind and rebind the organization or reimport the project.
When AI CodeFix is enabled and both your organization and project are bound to Azure DevOps, you can open a pull request in Azure DevOps directly from a generated fix. See Opening a pull request in Azure DevOps for details.
When your organization is bound to Azure DevOps, the SonarQube Remediation Agent can fix issues in your backlog, either automatically on a schedule or for issues you assign with Assign to Agent, and opens a pull request in Azure DevOps for your review. To enable it, see the Remediation Agent page; for how it behaves, see Backlog fix suggestions.
Note: Pull request remediation, where the agent fixes new issues in a failing pull request, is currently available for GitHub-bound projects only.
Last updated
Was this helpful?
Was this helpful?