Sonarqube quality gate condition using 'Severity'

Question

I would like to setup a quality gate that checks:

• No Vulnerabilities
• No Bugs with severity >= Major

Can I, and if so how, add that severity into the condition?

Regards!

Answer 1

You can rely on the Maintainability Rating, the Reliability Rating and the Security Rating similar to what's done on sonarcloud.io. You may want to rely on New Code instead of the overall rating to take profit of the leak concept.