Authenticate to SonarQube Server using tokens

SonarQube
1

Must-share information (formatted with Markdown):

  • which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension)
    We are using Community Edition Version 7.9.4 (build 35981) for running our code quality checks via Azure DevOps. Authentication is via Azure AD.
    We are developing an extension to complement our Azure DevOps dashboard by showing the status of Quality Gate checks in SonarQube.
    As per the SonarQube WebAPI Documentation the recommended way of authentication is user token. We have got it working using user token.
    Now coming to the problem. Once a user leaves the organization the user token will not be valid any more. In this case we have to update the token and republish again. Is there any solution to this?
2

Hi @ckv, welcome to the SonarSource Community!

Usually customers create a special service account(s) for access by CI pipelines. That way the analysis is not in jeopardy if a user leaves the organization.