DevSecOps-1: Installing and Running SonarQube, and Creating a SonarQube Project

In this article series, I will talk about the installation, concepts, and usage of SonarQube, Trivy, OWASP Dependency Check, OWASP ZAP, and JaCoCo. Also, I will show you step-by-step how to use them in practice, with hands-on.

In this article, we will install SonarQube Server with Postgresql Database into an Ubuntu server in the cloud, and then create SonarQube project in order to integrate to Azure Pipeline that runs a microservice Java application in it. I will also talk about the installation, concepts, and usage of SonarQube in the introduction part of the article.

Topics we will cover:

1. What is SonarQube?
   1. a. Components of the SonarQube Platform
   1. b. Using of SonarQube
2. Installing SonarQube Server with Postgresql Database
   2. a. Prerequisite
   2. b. Installation of SonarQube
   2. c. Running SonarQube
   2. d. Creating a SonarQube Project
3. As a result
4. Next post: “Integrating and Running SonarQube into Azure Pipelines, and Examining The Test Results from The Sonarqube Dashboard”
5. References