SonarCloud

SonarCloud code analysis tool is designed to detect coding issues in 30+ languages, frameworks, and IaC platforms. By integrating directly with your CI pipeline or one of the supported DevOps platforms, your code is checked against an extensive set of rules. More information can be found on the SonarSource website.

Integration Method: API

Tables: Detection Finding (2004)

The integration supports the following type of events.

Note:

SonarQube Cloud is a continuously updated cloud service. As of this document preparation, latest release was on January 21, 2025.

Prerequisites

• The user should have access to login into SonarCloud environment.

• The user should have access to DataBee console.

Configuration Overview

1. Generate an API token on the user console with the required scopes.

2. Add the SonarCloud data feed integration in the DataBee console with the required API token.

   DataBee Parameter	SonarCloud Parameter
   Token	Token

SonarCloud Configuration

Start by creating an API Token for the integration.  

1. Log on to SonarCloud Portal using the user account credentials having Admin privileges.

   

2. Navigate to Account > My Account. The “API Access” page window will appear. 

   

3. On the “My Account” page, click on security and then type any new name for the token and click on Generate Token.

   

4. A new token will be created, and it will appear below. Copy and save the generated personal access token. This will not be available later to be copied. It is used when configuring DataBee. 

   

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.

   

2. Search for the SonarCloud and click it as shown below.
    

3. Click on the API Ingest option for collection method.

   

4. Enter feed contact information and click Next.

   

5. In the configuration page, confirm the following:

   • API Base URL: this is the base URL that DataBee will interact with.

   • Authorization Method: Bearer Token

   • Token: paste the Token generated earlier in the SonarCloud console.

   • Event types: preselected for all the events types the integration pulls.

   

6. Click Submit.

Troubleshooting Tips

• Ensure the token is pasted correctly. Since you cannot view the token after the 1^st time, re-create the token, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.

• Ensure the SonarCloud scopes/permissions are correct.