Examples: Azure DevOps

Mon, 01 Jan 0001 00:00:00 +0000

Sonar Cloud offers a tool to assist in the analysis of technical debt in software projects, also allowing to find possible bugs and vulnerabilities, acting as a support platform in improving the quality of projects.

Sonar can be integrated with services such as Azure DevOps, Github, Gitlab, Bitbucket and many others allowing you to update with each version generated.

Items needed in your environment

An active account on the Devprime platform and Developer or Enterprise license.
Devprime CLI installed and active (dp auth)
An active [Sonar Cloud] account(https://sonarcloud.io)
A new microservice building using the Devprime platform.
A GIT account and repository in Azure DevOps (https://azure.microsoft.com/en-us/services/devops/).

**Creating and obtaining project credentials
The first step is to create a new project and get the SONAR_TOKEN

Creating Azure Pipeline Yaml
Create a new file in the project folder named “azure-pipelines.yml”
and add the YAML content.

##########################################################################
# Create an environment variable "SONAR_CLOUD_TOKEN" to put the token
##########################################################################

trigger:
- main

pool:
  vmImage: ubuntu-latest

variables:
  buildConfiguration: 'Release'

steps:

- task: UseDotNet@2
  displayName: 'Install .NET 6.x SDK'
  inputs:
    packageType: 'sdk'
    version: '6.x'
    includePreviewVersions: true


- task: CmdLine@2
  displayName: 'Starting Sonar Scanner'
  inputs:
    script: |
      echo Installing Sonar Scanner tool
      dotnet tool install --global dotnet-sonarscanner     
      echo Starting ...
      dotnet sonarscanner begin /o:Devprimelabs /k:stack-startup /d:sonar.host.url=https://sonarcloud.io  /d:sonar.login=$(SONAR_CLOUD_TOKEN)      

- script: dotnet build --configuration $(buildConfiguration)
  displayName: 'dotnet build $(buildConfiguration)'


- task: CmdLine@2
  displayName: 'Collect Sonar results and Publish'
  inputs:
    script: |
      echo Collect Sonar results and Publish
      dotnet-sonarscanner end /d:sonar.login=$(SONAR_CLOUD_TOKEN)

Make the commit

1
2
3

git add . 
git commit -am "sonarcloud"
git push

Creating a new Pipeline in Azure DevOps
Follow the steps in the Azure DevOps portal to create a new Pipeline using the “azure-pipelines.yml” file exists.

-Pipelines

New pipeline
Azure Repos Git
Existing Azure Pipelines YAML file

Locate and click the “Variables” button to create the new variable “SONAR_CLOUD_TOKEN” and add the value of the Token obtained from Sonar Cloud.

Start the Pipeline you just created. At the end, the result will be published on Sonar Cloud.

Viewing in the Sonar Cloud portal
With each Build in Azure DevOps, the result is published to Sonar Cloud so you can follow the technical evolution of the development.

Devprime | Documentation – Sonar

Examples: Azure DevOps