[MGNLTEST-213] Enable SonarQube to use (on some) "core" projects Created: 05/Apr/22  Updated: 05/Jun/23  Resolved: 16/May/23

Status: Closed
Project: Magnolia Test Framework
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Story Priority: Neutral
Reporter: Christoph Meier Assignee: Maxime Michel
Resolution: Done Votes: 0
Labels: foundation_team
Σ Remaining Estimate: Not Specified Remaining Estimate: Not Specified
Σ Time Spent: 0.5d Time Spent: 0.5d
Σ Original Estimate: Not Specified Original Estimate: Not Specified

Issue Links:
Relates
relates to BUILD-542 Experiment with Sonarqube Closed
relation
is related to BUILD-1030 New look at tooling for assessing qua... Closed
is related to BUILD-845 Quality initiative Selected
is related to BUILD-964 Deploy managed-by-code services in AW... Open
is related to BUILD-542 Experiment with Sonarqube Closed
Sub-Tasks:
Key
Summary
Type
Status
Assignee
MGNLTEST-214 Figure out proper set-up of all invol... Sub-task Closed Christoph Meier  
MGNLTEST-215 Setup SonarQube instance with fargate Sub-task Closed Maxime Michel  
MGNLTEST-216 Select and configure 1 "core" project Sub-task Closed Maxime Michel  
MGNLTEST-220 Evaluate pricing for SonarQube (for D... Sub-task Closed Maxime Michel  
MGNLTEST-410 Code duplicate check ... also for Ghe... Sub-task To Do  
Template:
Acceptance criteria:
Empty
Task DoD:
[X]* Doc/release notes changes? Comment present?
[X]* Downstream builds green?
[X]* Solution information and context easily available?
[X]* Tests
[X]* FixVersion filled and not yet released
[X]  Architecture Decision Record (ADR)
Team: Foundation
Approved:
Yes

 Description   

SonarQube is an industry standard product to track the metrics of code quality.
(https://www.sonarqube.org/)

Services is using SonarQube for the PaaS project.
Read comment on BUILD_542 about how they are using SonarQube.

In a recent meeting of the "Group of interest for testing&QA" Rabbie pointed out, that
We should have an initiative to look-up the coverage & code quality and it should be trackable.
(See https://wiki.magnolia-cms.com/display/DEV/2022-03-24+GoI_QA+_T+2-weekly+meeting)
On that meeting the group has decided to set up SonarQube to use it on a first "pilot" project on a "core" module.

Constraints

Initially set it up in a way, that breaking a rule does not block (a commit) - but still provide the analysis.

Code analysis (likely) should run on jenkins, likely with jenkins-sonar-plugin, see https://docs.sonarqube.org/latest/analysis/scan/sonarscanner-for-jenkins/ .


Generated at Mon Feb 12 07:46:40 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.