SonarQube 8.9.3 SonarScanner for Azure DevOps 5.x / 4.x Hi! We are planning to integrate SonarScanner for Azure DevOps into our pipelines and because our pipelines run on Microsoft-hosted agents, we’ll have to expose our SonarQube server to the internet. To reduce attack surface, we would like to…

Hi, Welcome to the community! To be clear, when you say “expose” I guess you mean “make visible outside your network”? Regarding the API list, the easiest thing to do here is run an analysis & see which APIs are called. I could rattle off a few, but I might miss some. HTH, Ann

SonarQube security hardening

SonarQube Server / Community Build

system (system) Closed December 14, 2021, 9:14am 4

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Exposing the SonarQube server to the SonarScanner via the Azure api management service? SonarQube Server / Community Build sonarqube , azuredevops-server	0	662	January 14, 2021
Access internal SonarQube from Azure DevOps hosted agents SonarQube Server / Community Build sonarqube , azuredevops-services , azure	1	1422	November 15, 2019
Azure DevOps Microsoft-Hosted Agents integration with SonarQube On-premise Server SonarQube Server / Community Build sonarqube , azuredevops-services	4	1583	September 24, 2021
Azure DevOps Pipeline Integration to on-premise SonarQube using cloud build agent SonarQube Server / Community Build sonarqube	1	525	May 24, 2023
Azure DevOps as SaaS and on Prem Sonar SonarQube Server / Community Build	2	989	March 3, 2022

SonarQube security hardening

Related topics