io.github.cdklabs.codebuildsonarcloud.package-info Maven / Gradle / Ivy
The newest version!
/**
* This CDK construct creates an AWS Codebuild action to perform static code analysis using Sonarcloud.
*
*
Getting started
*
* Here is how to include the construct in your CDK code :
*
*
* const sonarcloudScan = new CDKCodeBuildSonarcloud(this, 'SonarcloudBuildAction', {
* sourceOutput: sourceOutput,
* sonarOrganizationName: 'my-sonarcloud-organization-name',
* sonarProjectName: 'my-sonarcloud-project-name',
* });
*
*
* Check Here for an example on how to use the construct.
*
*
Security
*
* A Sonarcloud account is required to use this construct. Create a Sonarcloud token to connect securely to Sonarcloud from AWS CodeBuild. Store this token in your AWS account in AWS Secret Manager, name the secret "sonar-token" and use "SONAR_TOKEN" as the secret key.
*
* Please review the AWS Secret Manager security best practices in order to securely create and manage your secret.
*/
@software.amazon.jsii.Stability(software.amazon.jsii.Stability.Level.Experimental)
package io.github.cdklabs.codebuildsonarcloud;