Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Deleted user
0 / 0 points
Next:
badges earned

Your Points Tracker
Challenges
Leaderboard
  • Global
  • Feed

Badge for your thoughts?

You're enrolled in our new beta rewards program. Join our group to get the inside scoop and share your feedback.

Join group
Recognition
Give the gift of kudos
You have 0 kudos available to give
Who do you want to recognize?
Why do you want to recognize them?
Kudos
Great job appreciating your peers!
Check back soon to give more kudos.

Past Kudos Given
No kudos given
You haven't given any kudos yet. Share the love above and you'll see it here.

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

How to make Pull Request trigger Sonarqube scan

Hello,

 New to BitBucket... inherited a project, now trying to get up to speed and code-complete ASAP. We have a DevSecOps pipeline using BitBucket as SCM, SonarQube as our static analysis engine. Java is the development language. My Tech Lead would like to prevent a Merge of a Pull request if there are Critical or High issues found in the SonarQube analysis of code in the Pull request. So, I am looking for a way to trigger SonarQube scan on a Pull request and if it fails (Critical issue found) the Merge is not allowed to go through or some notification is sent. There is hope also that issue that pre-existed on the branch would not trigger the notification (legacy issues don't break Merge requests); 

I see plugins for BitBucket that are "pull-request decorators" but they lack documentation (open source ones do, anyway...); any assistance is appreciated. 

1 answer

1 accepted

thanks, Aron. That seems to be the most often recommended plugin to accomplish this. I will pursue it as a solution. 

Glad that it was helpful. Please remember to click the checkmark at the answer so that future viewers see that as the "correct" answer.

Hi guys, how´s going on?

I´m having the same needed but in my case I have a SonarQube server and I´m using BB Cloud, do you know if there is any similar plugin or something similar to get the results when someone does a pull request?

 

Regards,

 

Jose Ramon Mañes

I am also having the same scenario but we dont have bitbucket server, so can we still integrate bitbucket with sonarqube

Update: we have recently released a new app called Better DevOps Automation. It allows executing automations with Git, Subversion, Bitbucket, GitLab, GitHub and other Version Control System implementations.

The automations can be started by multiple types of triggers. The automations can do a bazillion of different things, also including SonarQube and other type of code quality checks.

You may find something useful here, make sure you check this out.

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Bitbucket

Calling any interview participants for Bitbucket Data Center

Hi everyone,  We are looking to learn more about development teams’ workflows and pain points, especially around DevOps, integrations, administration, scale, security, and the related challeng...

647 views 7 4
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you