Using SonarCloud (SC) with Azure DevOps

SonarCloud
1

Looking at purchasing SC; we currently have a Azure DevOps CI/CD set-up using MSBuild, and I have a couple of questions:

  1. Can SC look at a on-prem Git repository that is publicly accessible?
  2. Where is the processing/analysis done? In the above case, on prem, or uploaded to the cloud and processed there? If so, how would one check the status to fail the build based on the quality gate?

Thank you.

2

Hi @mkingscott,

Yes !

Analysis is done where the build agent / SonarScanner is running. But the data is indeed sent to our server then to be processed / stored.
Depending on your ALM / CI tool, you may or may not benefit from the failed status of the build. So then you may have to introduce your own script to be able to have that feature in it.

HTH,
Mickaël

1 Like
3

Re point 2, if we’re using MS Build (we are), I assume there’s a SonarCloud plug-in into the build process to do the first-pass analysis?

There’s already a third-party plug-in to assess the state of analysis and break the build, so that’ll do :slight_smile:

Thanks again.

4

And more specifically, we provide a SonarScanner for Azure DevOps that is an extension of Azure DevOps, available in the marketplace. You can read more here : https://sonarcloud.io/documentation/integrations/vsts/

1 Like