Implement a custom metric to use in Quality Gate checks

SonarQube Server / Community Build
1

Hello everyone,

I’m using SonarQube v.7.9.1 and I wanted to ask if it’s possible to define a custom metric to use in my Quality Gates.

For example I’d like to check if:
Vulnerabilities / (Vulnerabilities + Bugs + Code Smells) * 100
is less than X%.

Is it possible to implement something like that inside a Quality Gate condition?

Thanks to everyone that will answer.

2

Hey there.

The answer is no.

Can you explain why such a metric would be useful (or more useful than the other metrics available?)

Colin

3

Hi Colin, thanks for your quick answer.

Such metric could be useful because it’s one of the 5 OWASP’s KPI for Web Application Security, called “Security to Quality Defect Ratio”.

You can see it at page 18 of this deck of slides:

4

Is it possible to define the custom metric implementing a SonarQube plugin?

I’m asking again because of this answer given by G Ann Campbell to a similar request: Monitoring custom metrics of a Project - #2 by ganncamp

Thank you