SonarQube Training in Sud-Vest

SonarQube serves as a platform dedicated to the continuous inspection of code quality and security, leveraging static analysis and reporting tailored for developers.

This instructor-led live training, available either online or on-site, targets intermediate developers, DevOps engineers, and security professionals aiming to implement static code analysis, integrate SonarQube into Azure DevOps pipelines, and enhance secure development practices.

Upon completion of this training, participants will be able to:

• Describe SonarQube’s architecture, core capabilities, and security-focused rulesets.
• Configure SonarScanner alongside common build tools like Maven, Gradle, and Ant.
• Integrate SonarQube into Azure DevOps pipelines and import Azure Repos for continuous analysis.
• Define and adjust analysis parameters, create custom rules using the SonarQube API, and analyze security reports.
• Implement secure development methodology improvements and clarify responsibilities within the CI/CD process.
• Conduct hands-on analyses using sample repositories (Java + Quarkus and Angular) and resolve detected issues.

Course Format

• Interactive lectures and discussions.
• Guided, practical labs utilizing real-world repositories.
• Live configuration, testing, and troubleshooting within an Azure DevOps and SonarQube environment.

Course Customization Options

• To request a customized version of this training (featuring different language stacks, deeper DevOps integration, or expanded labs), please contact us to make arrangements.

This instructor-led, live training in Sud-Vest (online or onsite) is designed for DevOps engineers and developers who aim to use SonarQube for performing code reviews that are fully integrated into development toolchains, including Jenkins, GitHub, Azure DevOps, and others.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start running automatic code reviews.
• Integrate SonarQube with continuous integration tools such as Jenkins and Azure DevOps.
• Run continuous code inspections to eliminate bugs and security vulnerabilities.
• Collect and analyze data to drive improvements for code cleanup, maintenance, and security.