search

newtmitch / docker-sonar-scanner

Quick sonar scanner docker image
MIT License
129 stars 88 forks source link

Securing values in sonar-runner.properties #33

Closed BasanthKomuroju closed 5 years ago

BasanthKomuroju commented 5 years ago

Hello,

We would like to know if we can secure the sensitive information i.e., credentials and other values that we pass in sonar-runner.properties file. Could you please help?

Thanks.

BasanthKomuroju commented 5 years ago

We would run the sonar scan as a part of our Azure DevOps CI pipeline.

newtmitch commented 5 years ago

Sorry, I'm honestly not the best person to talk to about that. I'm a much lighter user of Sonar than most people here would be and wouldn't know how to suggest setting that up for Sonar itself. I'd imagine anything you could do with Sonar regularly you could do with the Docker version, but I wouldn't know how best to approach this particular challenge.

DmitriyStoyanov commented 5 years ago

@BasanthKomuroju, I guess you could use something like sonar.login=${env.SONAR_LOGIN} in your property file and add this variable SONAR_LOGIN in your env property