🔍
Code QualityAPI Key

SonarCloud Integration

SonarCloud provides code quality and coverage analysis that Koalr uses in deploy risk scoring. When SonarCloud's quality gate fails on a PR, Koalr increases the deploy risk score for that deployment. The integration reads analysis results and coverage metrics — it does not trigger new analyses.

What Koalr pulls from SonarCloud

  • Repository-level coverage percentage and trend
  • New code coverage (coverage on code added in the last 30 days)
  • Quality gate status (Passed/Failed) per analysis
  • Code smells, bugs, and vulnerability counts
  • Security hotspot classifications
  • Duplicated code percentage

How SonarCloud data feeds into Koalr

  • Deploy risk scoring — quality gate failures and coverage drops increase risk score
  • Coverage trend tracking across sprints and releases
  • Quality debt visibility in engineering dashboards
  • Pre-deploy quality gates — block high-risk deploys when quality gate is failing

How to connect SonarCloud

  1. 1

    Go to Settings → Integrations in your Koalr dashboard.

  2. 2

    Find SonarCloud in the integrations list and click Connect.

  3. 3

    Generate a read-only API token in SonarCloud and paste it into Koalr. No OAuth flow required — the token is encrypted at rest.

  4. 4

    Koalr begins syncing historical data immediately. Most integrations backfill 90 days of history on first connect.

Permissions and scopes requested

Koalr requests the minimum permissions required to read the data above. All access is read-only unless noted otherwise.

  • Read-only user token scoped to your SonarCloud organization
  • Access to project analysis results, measures, and quality gates

Ready to connect SonarCloud?

Connect in under 5 minutes. Koalr backfills 90 days of history automatically — no manual imports, no CSV uploads.