PR Decoration In GitLab

SonarQube Server / Community Build
1

Must-share information (formatted with Markdown):

  • which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension)
    Version 7.3 (build 15553)

  • what are you trying to achieve
    Looking forward a feature “PR Decoration in Private GitLab”

  • what have you tried so far to achieve this-
    Actually we have been approached by your Business team to renew our Developer Edition. We asked for a feature where as we see Sonar Issues in Pull Request itself in GitLab. They gave us some references but what we are looking for was not clear. so we were told to create issue here.

Q1 - Would you be able to suggest if as per attached document the “Desired” feature present in SonarQube for GitLab ? Is there any easy to understand UI example we can refer before you suggest us to upgrade ?

Currently we have to go to GitLab and SonarQube UI spearately for each branch analysis -

current-git-lab-PR
current-git-lab-PR1914×857 199 KB

current-sonar-qube
current-sonar-qube1561×674 83.4 KB

Expecting to see sonar issues reported to specific Line of Code in GitLab PR -
expected-1-screen
expected-1-screen1485×793 86 KB

Q2 - Is there any support for Flutter ?

2

Hello Chandraprakash,

GitLab integration started only on 8.x versions, so please go ahead and upgrade to the latest 8.4: https://www.sonarqube.org/downloads/

Here you can understand how SonarQube integrates with GitLab (don’t miss the video!): https://www.sonarqube.org/gitlab-integration/

Flutter support is not on the roadmap.

Hope this helps. Regards,

Luis

1 Like
3

Hi Luis,

Thanks for your reply. As I explored the video at 2:11 I learned it takes you to sonarqube UI page and issues you will see only in sonarqube. Is my understanding correct ? What we are looking for is seeing issue in Code of Merge Request Itself.

4

Please , we are near to license renewal and want to understand if upgrading is helpful or not.

As I explored the video at 2:11 I learned it takes you to sonarqube UI page and issues you will see only in sonarqube. Is my understanding correct ? What we are looking for is seeing issue in Code of Merge Request Itself . Is it possible ?
5

Hello Chandraprakash,

The Merge Request decoration contains some key information only.

The idea is that if your Quality Gate is Green it’s all good to go (no need to check SonarQube UI) and if it is Red, then you should review before merging. To see further details you will need indeed to go to SonarQube UI (or otherwise the MR decoration would be probably too long, which is counterproductive).

Without a Developer Edition license you won’t have any MR decoration and will always need to check SonarQube UI to have further information. The license also gives you Branch Analysis, Detection of injection flaws and additional language coverage, and I hope you renew.

1 Like
6

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.