SonarCloud and SonarLint Setup Steps
Link your ADO account to SonarCloud
- Go to the SonarCloud link and click "Log In" then "With Azure Devops" button
- Let one of the senior devs know so they can add you to the SonarCloud project
- Login again and make sure you can access the Utopia project in SonarCloud
Download and setup the SonarLint IDE tool
- Go to https://marketplace.visualstudio.com/items?itemName=SonarSource.SonarLintforVisualStudio2019 and download the extension.
- Restart VS if it was running. (Yes, you have to)
- Inside VS go to Team Explorer > SonarQube > connect
- You'll be prompted for a url and login for SonarCloud.
- Url is https://sonarcloud.io
- For username/password you'll need to generate an auth token. Go to SonarCloud, login, click on your profile pic > My Account. Now click the Security tab, enter a token name, and click Generate. I'd recommend saving this token into a password manager, you can only see it one time.
- Copy this token into the Username field back in the VS login prompt, no password is needed
- Select EFC Sonar Cloud Integration as the Project
- In the Team Explorer > SonarQube tab, right click on Utopia and select Bind (Or update if it's already been bound)
- It will take a minute, but all of the linter rules will be pulled down from the cloud and you should start seeing additional Warnings for security issues in the Error List tab on the bottom of the IDE (Error Code will start with an 'S')