SonarQube docker container for Checkmarx integration

SonarQube server with the Checkmarx plugin. Based on the official docker image from here. By default, the image will use an embedded H2 database that is not suited for production. To configure an external DB check the official reference.

No special options are required to build the image: docker build -t cxai/cxsonarqube .

Running

docker run --name sonarqube -d --rm -p 9000:9000 -p 9092:9092 -v sonarqube:/opt/sonarqube/data cxai/cxsonarqube

Setup

1. Login as admin/admin
2. Create a project. Click on the project, go to Administration -> Checkmarx and configure server URL/credentials. Pick the Cx project.
3. Get the sonar scanner for your platform
4. Create a scan token
5. Run the sonarqube scan sonar-scanner -Dsonar.projectKey=projectKey -Dsonar.sources=. -Dsonar.host.url=http://localhost:9000 -Dsonar.login=yourScanToken

References

• Setting up the Checkmarx SonarQube Plugin