Configure Webhook in SonarQubeâ„¢
Include Code Quality for Bitbucket receives the analysis results from SonarQubeâ„¢ via Webhook.
Options for Webhook setup
Automatic setup (recommended):
For SonarQubeâ„¢ 7.8 or newer
Required for SonarQubeâ„¢ 7.7 or older
Or to use BasicAuth or manually configured secret
The base URL configured in Bitbucket cannot be reached from SonarQubeâ„¢
Manual webhook setup
To manually configure the webhook, enable "manual webhook configuration" in the SonarQubeâ„¢ server settings. For the manual webhook you have two options:
either you configure a manual webhook with
the name ch.mibex.bitbucket.sonar,
the URL http://bitbucketserver/rest/sonar4stash/1.0/webhook/secret
a secret in SonarQubeâ„¢ that must match the one in the server configuration:
Â
or you use basic auth with a Bitbucket user with
the webhook name ch.mibex.bitbucket.sonar
an URL like https://user:userPassword@bitbucketserver/rest/sonar4stash/1.0/webhook/basic_auth
Replace user:userPassword with credentials of a Bitbucket user with READ permissions for the repos you want to analyze.
leave the secret empty.
Â
For SonarQubeâ„¢ 7.7, please make sure to pass -Dsonar.analysis.scmRevision=COMMIT_ID to your SonarQubeâ„¢ analysis. For newer SonarQubeâ„¢ versions, this is not necessary anymore.
SONARâ„¢, SONARQUBEâ„¢ and SONARCLOUDâ„¢ are independent and trademarked products and services of SonarSource SA: see sonarsource.com, sonarqube.org, sonarcloud.io.