Skip to content

Integrate Code and Security Analysis in Pipeline (SonarQube) #333

@mhellmeier

Description

@mhellmeier

🚀 Feature Request

Current Problem

An analysis of the code, possible problems, quality analysis, security analysis, etc., is currently missing.

Proposed Solution

Add and integrate an analysis tool such as SonarQube. It should run automatically in the pipeline to check the code on every pull request. Further, specific minimum quality requirements should be defined and enforced by the pipeline (by creating a failing pipeline job if the PR does not meet the minimum quality requirements).

Additional Context

Check the usage of SonarQube Cloud for public GitHub repositories.

Metadata

Metadata

Assignees

No one assigned

    Labels

    featureNew feature or requestpipelineBuild, Action, CI/CD etc.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions