Configuring Quality Profiles
Quality Profiles are central to SonarQube, since this is where the security related rules are defined and assigned to projects. For additional information on Quality Profiles, refer to Quality Profiles in the SonarQube Documentation. Quality profiles for Checkmarx are automatically created by the Checkmarx SonarQube plugin, therefore security rules are already predefined. For additional information about rules, please refer to Rules in the SonarQube Documentation.
Traditionally, when starting with quality profiles, you would use the default profile Sonar Way because it contains all the rules that are generally applicable to most projects. In some instances you could define a Quality Profile that uses Sonar Way and Checkmarx rules.
Defining a Quality Profile using SonarWay and Checkmarx Rules
To create a new quality profile, refer to Quality Profiles in the SonarQube Documentation for further information and instructions.
Notice
Creating a new quality profile is required from v6.5 of SonarQube because the default profile (Sonar way) is read-only and cannot be edited.
Assigning a Checkmarx Quality Profile to a Project
Checkmarx Quality profiles and their predefined rules can be assigned to projects as explained below.
To assign a quality profile to an existing language:
Go to Projects and open the dsired project from the Project list.
Go to Project Settings
and select Quality Profiles from the menu.
To assign a quality profile to a listed language, go to the row of the desired language and click <
Change profile>. The Change Quality Profile dialog appears.
Select Always Use a Specific Quality Profile and select the desired quality profile from the list.
Click <Cancel> as this change is automatically applied after the next analysis.
Click <
Add language>. The Add Language dialog appears.
Select the desired language. The Choose a Profile field becomes available.
Select a quality profile from the list and then click <Save>. The new language is added with the quality profile assigned.
Notice
You need to assign a quality profile to the project for each language that your project supports.