Once you have setup your SonarQube servers, you just need to use the SonarQube Connector Hotspots Brekdown macro to setup the resource you want to get the security hotspots from.

You have to complete these parameters:

• SonarQube server: this is a dropdown list with the SonarQube servers configured through the plugin settings.

• Resource Key: This is the key of the SonarQube resource where you are going to retrieve the security hotspots. You can get this key from your SonarQube project dashboard or your sonar-project analysis parameters. You can setup more than one resource/project key by providing a comma separated list of resource keys. Measures will be aggregated into a unique view of all the projects together.

  • Note: Enterprise portfolio are also supported you can enter the portfolio name here.

• Tags :This is an optional field. You can get the projects through the tags associated with them in SonarQube/SonarCloud. These tags can be obtained from your project page in SonarQube/SonarCloud or from the analysis properties. You can configure more than one tag by specifying a comma separated list of tags. The results will be aggregated in a single view with all the resources together.

• Branch: Name of the branch (visible in the SonarQube UI)

  • Only available on single project configuration

Open

Setting multiple resource keys

The same way as the SonarQube Connector Macro, you can use multiple resouce keys in your SonarQube Connector Issue Breakdown macro. The value that will be displayed will be the aggregated value.

Take a look at Setting multiple resource keys if you need more information about it.