SonarQube for DevOpsのトレーニングコース

SonarQube is a platform for continuous inspection of code quality and security through static analysis and developer-focused reporting.

This instructor-led, live training (online or onsite) is aimed at intermediate-level developers, DevOps engineers, and security practitioners who wish to implement static code analysis, integrate SonarQube into Azure DevOps pipelines, and strengthen secure development practices.

By the end of this training, participants will be able to:

• Explain SonarQube architecture, core features, and security-focused rulesets.
• Configure SonarScanner with common build tools such as Maven, Gradle, and Ant.
• Integrate SonarQube into Azure DevOps pipelines and import Azure Repos for continuous analysis.
• Define and tune analysis parameters, add custom rules via the SonarQube API, and interpret security reports.
• Apply secure development methodology improvements and map responsibilities within the CI/CD process.
• Run hands-on analyses across sample repositories (Java + Quarkus and Angular) and resolve identified issues.

Format of the Course

• Interactive lecture and discussion.
• Guided, practical hands-on labs with real repositories.
• Live configuration, testing, and troubleshooting in an Azure DevOps + SonarQube environment.

Course Customization Options

• To request a customized version of this training (different language stacks, deeper DevOps integration, or expanded labs), please contact us to arrange.