Deep dive Sonar Cloud & integration with Azure DevOps

Tools: IAR Compiler, Azure DevOps, Sonar cloud, Programming language is Embedded C, YAML file, Static code analysis

3.90 (16 reviews)
Udemy
platform
English
language
Development Tools
category
instructor
Deep dive Sonar Cloud & integration with Azure DevOps
114
students
4 hours
content
Feb 2022
last update
$44.99
regular price

What you will learn

Introduction to Static code analysis

Work flow of Static Code Analysis

Introduction to Sonarcloud

Deep dive in to Sonar cloud including administration, Quality gates, quality profiles, Pull request Decoration etc

Detailed steps to integrate sonar cloud with Azure Pipeline in Embedded domain

Sonar cloud integration on Azure DevOps, mainly for embedded C language , IAR compiler

IAR Build integration with Sonar cloud configuration steps

Challenges faced in this Integrations, Limitations and lessons learnt

Description

In this course, we are going to see how to integrate Sonar cloud analysis tool  in MS Azure pipelines for Embedded C.

To integrate sonar build wrapper is used and a small power shell script written to download this build wrapper.

Creating IAR Compiler batch files for making build  with sonar cloud scanner.

YAML file creation for Build pipeline with detailed sonar cloud configuration steps.

Local Build agent is created and used for build pipelines. (Not a hosted agent)

Understanding and analyzing sonar cloud reports.

How to create a quality profiles?

How to create quality gates?

Walk through on Administration and settings.

Pull request decoration for auto comment in Pull request (in your Build pipeline).

Terminology understanding including code smells, Vulnerabilities , static code analysis (SCA) , build pipeline etc.

Focused more on version controlling of complete CI integration.

Will walkthrough on different SCA tools available and what need to be considered when we choose a SCA tool.

Will discuss on Challenges faced , limitations of these tools  and lessons learnt.

Difference between sonar cloud and sonarqube.

Work flow on the sonar cloud integration with Azure DevOps services.

Shift left testing and SCA advantages.

Will walkthrough on the sonar cloud creating project manually and scanning the project manually.

sonarcloud website walkthrough


Content

Introduction

Introduction - agenda
What is Static Code Analysis
Things to consider while choosing SCA Tools
Why we need SCA Tools
SCA tools advantages

Section 2: WorkFlow & Sonarcloud Integration steps with Azure pipeline -indetail

Work Flow in Azure DevOps
Azure DevOps Integration with Sonar Cloud
Azure DevOps Integration with Sonar Cloud - Continued
YAML File - Azure DevOps Integration with Sonar Cloud
Service Connection creation in azure devops for sonar cloud
Sonar cloud service endpoint - Feed data in Azure pipelines (GUI/YAML)
Steps required for sonar integration in Azure pipeline for C projects
Buildwrapper
Build wrapper and Power shell script - conclusion
Sonar project properties
Importing Azure DevOps Organization and key
Find and Feed Organization attribute in Azure pipeline (GUI/YAML)
Sonar project key from sonar cloud project to feed in sonar-project properties
Compile - Build batch file for IAR compiler
Sonar cloud integration with Azure DevOps - last 2 steps required
Azure Pipelines YML file
Triggering Pipeline Demo and conclusion

Sonar Cloud Deep dive

Sonar cloud login steps for azure devops
Creating an Organization in Sonar cloud
Creating an Organization in Sonar cloud Continued
Creating an Organization in Sonar cloud Manually - Continued
Sonar organization and project key for prepare analysis config step1
Manual Project creation sonar cloud for local - conclusion
Sonar cloud - Rules
Quality Profiles
Creating a Quality profile - Copy mode
Creating a Quality profile - Extended mode
Quality Profiles Conclusion
Quality Gates Introduction
Basic Terminologies - Bugs, Code smells, Code coverage, Vulnerability
Quality Gates Creation - demo
Quality Gates Conclusion
Pull Request Decoration for Azure DevOps services Intro
Pull Request Decoration for Azure DevOps services - Configuration Demo
Sonar Cloud and Sonar Qube Differences
Demo | Sonar project creation and scanning the project manually

Limitations, Lessons learnt and best practices

Limitations
Limitations continued
Challenges Faced while sonar cloud integration
Best Practices

Summary

Creating Personal Access Token (PAT) in Azure DevOps
Build Validation quality gate status check in Azure branch policies
Azure DevOps -Dashboard Metric for sonar cloud qualicy gate check status
Resources
Summary

Reviews

PADMAVATHI
March 23, 2022
Course is well organized and structured, Easy to understand. One of the best course on azure sonar cloud.

Charts

Price

Deep dive Sonar Cloud & integration with Azure DevOps - Price chart

Rating

Deep dive Sonar Cloud & integration with Azure DevOps - Ratings chart

Enrollment distribution

Deep dive Sonar Cloud & integration with Azure DevOps - Distribution chart
4190280
udemy ID
7/17/2021
course created date
8/22/2021
course indexed date
Bot
course submited by