Documentation Index

Fetch the complete documentation index at: https://help.nucleussec.com/llms.txt

Use this file to discover all available pages before exploring further.

SonarQube & SonarCloud

Prev Next
  1. Open a browser window and log into your SonarQube/Sonarcloud console.

  2. Click on your avatar in the top right corner of the screen and select Account.

sonar_step1.png

  1. Select the Security tab on the next page.

sonarqube_step2.PNG

  1. Enter in a name to the token section for the Nucleus access token.

sonarqube_step3.PNG

  1. Click Generate

  2. You should now see an API key which has been generated. Copy this token.

sonarqube_step4.PNG

  1. In a 2nd browser window, log into your Nucleus console.

  2. Navigate to Integration Hub > Connector Setup

  3. Select the SonarQube icon.

  4. In the Create SonarQube Connector popup, enter in the following:

Attention
If you're using the Nucleus Agent to connect to an on-premise server for this tool, please refer to the document here.

Field Description
Name Name to identify the Sonarqube connector in Nucleus
Description Optional description to add some details about the connector for other users
Sonarqube URL URL to your base Sonarqube installation or SonarCloud
Username The username you use to log into Sonarqube (the account which generated the API token)
Token The token you copied in step 6. Paste the token from step 6 into this field.
Import Options Select which findings you want to import from Sonarcloud (Vulnerabilities, Security Hotspots, Bugs, and/or Code Smells).
  1. Click Save Connection and wait for confirmation that the connector has been saved.

  2. Click Verify Connection and wait for confirmation that the connector was able to successfully reach your SonarQube installation.

You are all done! Your SonarQube connector is all set up! Navigate to Integration Hub > Import via Connector to start importing scans!

If you have any questions, please contact us through the support center.