Azure DevOps Pipeline Integration to on-premise SonarQube using cloud build agent

[Colin]

Hey there.

I can at least point you to this existing advice:

Connect to Github Action without externally exposing entire server

Hey there. Surely some DEBUG level logs will reveal to you each API call that the scanner makes (add -X under args), and you could derive the list of allowed endpoints from there. And, these endpoints could change from SonarQube version to SonarQube version and shouldn’t be considered as an API (if they change, we aren’t going to make noise about it). Typically when an organization has such requirements and doesn’t want to move their SonarQube instance the cloud, we would suggest using self-h…

I don’t have anything to share about an OpenAPI spec (at least there’s nothing officially)

Make sure you upgrade to SonarQube v9.9 LTS soon, not only to benefit from our Best LTS Ever™, but because soon we will systematically ask users to upgrade when they ask questions about earlier versions of SonarQube, which are now considered unsupported.