SonarQube Integration

[gayatrimuthina]

We are looking to integrate with an open source tool for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs, code smells, security vulnerabilities, and determine code coverage as part of unit testing. And we are currently considering various options, but SonarQube seems to be the best option at the moment.

We have a few queries about this:

a) Is integration between ServiceNow and SonarQube possible?
b) If the integration is possible, can you please suggest any case studies of previous implementations?
c) If the integration is possible, does ServiceNow offer any plugins that will make this integration much easier?
d) If such a plugin is available, is there any license cost involved?
e) If integration with SonarQube is not possible, are there any other similar tools that you would recommend, which can help us achieve our desired results?

[Hitoshi Ozawa]

I haven't seen any sonarqube plugin for ServiceNow. I've worked with SonarQube and it's possible to integrate it with GitLab/GitHub, Jenkins, Slacks to stop pull request with detected problems and to contact developers on detected problems. I remember it not to be that difficult.

Not sure how it would integrate with ServiceNow DevOps.

[jawwadhaq]

There is a SonarQube connector now available that works with SN DevOps