SonarQube Server

1# yaml-language-server: $schema=../../schema/component.schema.json
2# SonarQube Server: self-hosted code quality and security analysis server whose quality gate
3# decides whether an analysed project passes. "Managing quality gates" states the built-in Sonar
4# way gate is provided by Sonar, activated by default and read-only, and that every project not
5# explicitly assigned to another gate uses the instance default gate. The same page gives the
6# Sonar way conditions on new code: no new issues, no reliability, security or maintainability
7# rating worse than A, security hotspots reviewed at 100%, coverage at or above 80% and
8# duplicated lines at or below 3%. The gate reports a pass or fail status; blocking a pipeline on
9# it is the CI system's choice, so the effect is audit.
10schemaVersion: "1"
11type: "component"
12id: "sonarqube"
13kind: "policy-engine"
14provider: "default"
15docs: "https://docs.sonarsource.com/sonarqube-server/latest/"
16defaults:
17  managed: false
18  effect: "audit"
19  enforcementMode: "enforced"
20  scope: "resource"
21  remediation: false
22properties:
23  defaultQualityGate:
24    type: "string"
25    default: "Sonar way"
26  newCodeCoveragePercent:
27    type: "integer"
28    default: 80
29  newCodeDuplicationPercent:
30    type: "integer"
31    default: 3
32  securityHotspotsReviewedPercent:
33    type: "integer"
34    default: 100