Automated way of raising issues in Jira or GitLab for defects found in SonarQube

[nagaraj.koppa (nagaraj)]

Hi Team,

We would like to have an automated way of raising issues in Jira or GitLab for defects or vulnerability found by SonarQube scanner.

Could you please help on this. How can we integrate these.

We are using the below tools:

SonarQube : Developer edition: 8.4.1
Gitlab : Community edition : 12.1.6

Regards,
Nagaraj

[Colin]

Hey there.

I suggest checking out my colleague’s answer on similar thread.

JIRA plugin alternate for connecting jira to sonarqube

Generally speaking it’s worth noting that tracking SonarQube issues into Jira is not something we (at SonarSource) consider as a good practice. There’s a good insight on this in this blog post: Stop planning; fix the leak!. It dates back from 2 years, so the details are maybe not up-to-date, but some essential pieces remain: Let’s say you’re using JIRA in your company. When you link an issue to JIRA, the SonarQube integration automatically creates a ticket for that issue. So if you want to kee…

Nowadays, we call “Fix the Leak” Clean as You Code!