Github action security use

[DhirajBembade]

Select Topic Area

Question

Body

I need guidance for using SonarQube for CI/CD in GitLab. Any material links or suggestions would be really helpful.

[davevad93]

Hi @DhirajBembade , take a look at these links:

• Using GitLab CI/CD with a GitHub repository
• GitLab integration
• Introduction to GitHub integration
• Setting up the GitHub integration with SonarQube
• Adding the SonarQube analysis to your GitHub Actions workflow
• Setting up your GitHub projects in SonarQube

[DhirajBembade]

thank you for the information it is helpful .

[Rifahad]

s:

Using GitLab CI/CD with a GitHub repository

[Rameeskc]

i got it

[gitricko]

You might wanna try sonarless which automates the above in just a few steps.

Local install:

Install CLI: curl -s "https://raw.githubusercontent.com/gitricko/sonarless/main/install.sh" | bash

Scan current directory: sonarless scan

Get results: sonarless results

Check out the automation

https://github.com/gitricko/sonarless

It even have a GitHub Action for GITHUB CI. The nice thing about this is that you don't need a host sonarqube