image: maven:3.3.9 clone: depth: full pipelines: pull-requests: "**": - step: name: SonarQube analysis script: - pipe: sonarsource/sonarqube-scan:1.0.0 variables: SONAR_HOST_URL: ${SONAR_HOST_URL} # Get the value from the repository/workspace variable. SONAR_TOKEN: ${SONAR_TOKEN} # Get the value from the repository/workspace variable. You shouldn't set secret in clear text here. definitions: caches: sonar: ~/.sonar