SonarQube

On this page

SonarQube is a Security input connector. Connect to your SonarQube API to start collecting vulnerability data. Create a SonarQube service user before connecting.

IP Allowlists

You might need to add the Monad IP range of 34.210.32.104/32 to your SonarQube allowlist, so Monad can connect to it.

Create a SonarQube service user

Before you connect SonarQube to Monad, you should create a dedicated service user to control Monad’s scope of access.

To create a service user:

  1. Log in to SonarQube as an administrator.
  2. From the landing page, click Administration in the top navigation.
  3. On the next page, click the Security dropdown, and click Users.
  4. Click Create user in the top right corner.
  5. Enter the login as monad-service, and the user name as “Monad Service”. The email field is optional.
  6. Enter a password for the new user, and save it to your password or secrets manager.
  7. Click Create.

Set up a SonarQube connector

To set up a SonarQube connector, you need the username and password of a service user.

To set up the connector:

  1. Log in to your Monad account, and click Add connector.
  2. Select the SonarQube connector.
  3. Optionally, change the default name for the connector. This name serves as a label for the connector in the Monad app, and you can change it later.
  4. Enter the service user’s username and password.
  5. Enter the SonarQube service URL (e.g. http://sonar.mycompany.security:9000)
  6. (Optional) - set your connector schedule
  7. Click Connect.

That’s it! Monad tests the connection to SonarQube, and if successful, begins syncing data from SonarQube into your Monad account.

This page was last modified: 9 Oct 2023