Automate SonarCloud code scans using GitHub Actions
#sonarcloud #githubactions #codequality
SonarCloud is a static code analysis service that automates code scanning for 24 mainstream programming languages and frameworks including C#, Java, Python, TypseScript, JavaScript, Go, Kotlin, etc. In this video, we see how to set up automated code scans using GitHub Action workflow.
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬
🔗 Sonarcloud - https://sonarcloud.io/
🔗 GitHub Actions - https://github.com/features/actions
🔗 SonarCloud GitHub Action - https://github.com/SonarSource/sonarc...
▬▬▬▬▬▬ ⏱ Chapters⏱ ▬▬▬▬▬▬
00:00 - Introduction
0:46 - What is SonarCloud?
2:45 - How to integrate with SonarCloud?
4:25 - Configure Token
5:35 - Enable Github Action for GitHub repository
6:20 - Sonarcloud Github Action repo
7:20 - sonar-project.properties configuration file
8:10 - Add workflow definition to project
10:10 - Add SonarCloud token as secret in Github project
12:20 - Trigger Github action on source code check-in
13:50 - View different steps related to Github Action
14:20 - SonarCloud scan results
15:25 - Sonarcloud default scanners
16:45 - View scan results in SonarCloud portal
17:45 - Different categories in SonarCloud analysis
18:30 - Vulnerability levels
21:50 - SonarCloud rules
23:00 - Quality Gates
27:00 - Analyse external library Bootstrap using SonarCloud
28:35 - Summary
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬
Connect with me here:
🔗 Subscribe: / @nilesh-gule
🔗 YouTube : / @nilesh-gule
🔗 GitHub: https://github.com/nileshgule
🔗 Twitter: / nileshgule
🔗 Website: https://www.HandsOnArchitect.com/
🔗 LinkedIn : / nileshgule
#GitHubActions #DevOps #SonarCloud #howto #demo #tutorial #tipsandtricks #codescan #StaticCodeAnalysis #GithubActionsCICD #QulityGates