SonarQube Training in Gaia

SonarQube is a platform for continuous inspection of code quality and security through static analysis and developer-focused reporting.

This instructor-led, live training (online or onsite) is aimed at intermediate-level developers, DevOps engineers, and security practitioners who wish to implement static code analysis, integrate SonarQube into Azure DevOps pipelines, and strengthen secure development practices.

By the end of this training, participants will be able to:

• Explain SonarQube architecture, core features, and security-focused rulesets.
• Configure SonarScanner with common build tools such as Maven, Gradle, and Ant.
• Integrate SonarQube into Azure DevOps pipelines and import Azure Repos for continuous analysis.
• Define and tune analysis parameters, add custom rules via the SonarQube API, and interpret security reports.
• Apply secure development methodology improvements and map responsibilities within the CI/CD process.
• Run hands-on analyses across sample repositories (Java + Quarkus and Angular) and resolve identified issues.

Format of the Course

• Interactive lecture and discussion.
• Guided, practical hands-on labs with real repositories.
• Live configuration, testing, and troubleshooting in an Azure DevOps + SonarQube environment.

Course Customization Options

• To request a customized version of this training (different language stacks, deeper DevOps integration, or expanded labs), please contact us to arrange.

This instructor-led, live training in Gaia (online or onsite) is aimed at DevOps engineers and developers who wish to use SonarQube to run code reviews that are fully-integrated into development tool chains, such as Jenkins, GitHub, Azure DevOps, etc.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start running automatic code reviews.
• Integrate SonarQube with continuous integration tools, such as Jenkins, Azure DevOps, etc.
• Run continuous code inspections to eliminate bugs and security vulnerabilities.
• Collect and analyze data to drive improvements for code cleanup, maintenance, and security.