Search code examples
javaencryptionsonarqubetravis-cisonarcloud

How to configure SonarCloud

I have java project and I want to integrate it with SonarCloud I Follow the official steps:

Inspecting code with the SonarQube Scanner #

Before inspecting your code, you need to:

  1. Create a user authentication token for your account on SonarCloud.
  2. Encrypt this token travis encrypt abcdef0123456789 or define SONAR_TOKEN in your Repository Settings
  3. Find which SonarCloud.io organization you want to push your project on and get its key
  4. Create a sonar-project.properties file for your project (see the documentation). Then add the following lines to your .travis.yml file to trigger the analysis:

add in my travis.yml file

 addons:
  sonarcloud:
    organization: "xelian-github"
    token:
      secure: ${SONAR_TOKEN}
    branches:
      - master
script:
  # other script steps might be done before running the actual analysis
  - sonar-scanner

Where SONAR_TOKEN is a variable on Travis CI pointing to the key from SonarCloud.(It is not encrypted). enter image description here From SonarCloud I add permissions enter image description here

But when I start the travis build I have the following error:

Setting environment variables from repository settings
$ export SONAR_TOKEN=[secure]

 ....
ERROR: Error during SonarQube Scanner execution
ERROR: You're only authorized to execute a local (preview) SonarQube analysis without pushing the results to the SonarQube server. Please contact your SonarQube administrator.
ERROR: 
ERROR: Re-run SonarQube Scanner using the -X switch to enable full debug logging.

It seems to me that I the travis do not have permissions to upload results to SonarCloud. Is the problem in the token or in some Sonar configurations.

Solution

  • The official entry point to configure a project on SonarCloud is the "Get Started" page:

    • You will see that for Maven projects, you don't need to create a sonar-project.properties file at all

    • You will even find a link to a sample Maven project that is analyzed on SonarCloud