Sonar Cloud Integration Issue: Error during SonarScanner execution

SonarQube Cloud
, ,
1

Dear community,

I am writing because of an issue related to the integration of our code base with Sonar Cloud analysis via the Azure DevOps pipeline.

Recently, we encountered a disruption where the integration ceased functioning, resulting in error messages within our pipelines.

##[error]ERROR: Error during SonarScanner execution
ERROR: Project not found. Please check the ‘sonar.projectKey’ and ‘sonar.organization’ properties, the ‘SONAR_TOKEN’ environment variable, or contact the project administrator
ERROR:
ERROR: Error during SonarScanner execution
ERROR: Project not found. Please check the ‘sonar.projectKey’ and ‘sonar.organization’ properties, the ‘SONAR_TOKEN’ environment variable, or contact the project administrator
ERROR:
##[error]The SonarScanner did not complete successfully
The SonarScanner did not complete successfully

After a thorough investigation, we made the decision to reinstate my account as an administrator. Remarkably, this action resolved the problem, and our pipelines are now operational once again.

However, we are curious about the underlying cause. Was this resolution merely coincidental, or is there a specific reason why removing someone from the admin list leads to pipeline failures?

Thank you for your prompt attention to this matter.

Best regards,
Augustyn Binkowski
Senior Software Engineer @ DOCOsoft

P.S. Rest assured that the keys and tokens remain unchanged and have not been regenerated.

2

Hi Augustyn,

Welcome to the community!

Do I correctly infer that the token in use was generated from your account? And that analysis worked up until you were removed from the administrators’ list?

If so, then this was a question of permissions. Presumably, the Admin group has Execute Analysis permission at the global level. And your individual account does not.

So removing you from the admins group removed your ability to Execute Analysis. Restoring you restored that permission.

 
HTH,
Ann

3

Hi Ann,

Thanks for your quick response. The account used to generate the tokens was a company-generic DevOps account. I was the one who created those projects inside the Sonar Cloud portal. I’ve not generated/re-generated any access tokens I only copied the values to make it work. So please correct me if I’m wrong. Do you suggest re-generating/changing those tokens by using another account that will stay on the admin list?

Best regards,
Augustyn Binkowski
Senior Software Engineer @ DOCOsoft

4

Hi Augustyn,

So someone logged in as the DevOps account to generate the tokens?

 
Ann

5

Hi Ann,

Yes

Best regards,
Augustyn Binkowski
Senior Software Engineer @ DOCOsoft

6

Hi Augustyn,

If the token was from another account then your membership in the admins group shouldn’t have had any effect.

Can you share a screenshot of your project’s permissions, redacted as necessary? E.G.

Selection_1618
Selection_1618992×411 24.1 KB

 
Thx,
Ann

7

Hi Ann,

Sure, here are some details.

image
image2228×1175 129 KB

image
image1418×671 27.4 KB

Best regards,
Augustyn Binkowski
Senior Software Engineer @ DOCOsoft

8

Hi Augustyn,

Thanks for the screenshot. It confirms that you don’t have analyze permissions as an individual. I think the only thing left to do here is repeat the situation: remove yourself from owners again & verify analysis again fails.

And then re-generate a token from your technical user and configure it into analysis. Because all the evidence points to the current token being from your account. :woman_shrugging:

 
Ann