Receive SonarQube webhook data and post reviews to Gerrit.
This project is hosted at https://tools.wmflabs.org/sonarqubebot/ where it listens for webhook data from SonarQube. It then posts a review to Gerrit based on the quality gate success/failure, with verification +1 given for passing quality gate checks. Robot comments are created with each issue found.
Set this in .env.local
GERRIT_USERNAME- the username to post underGERRIT_HTTP_PASSWORD- the HTTP password for that user (not the same as their login password)SONARQUBE_HMAC- the secret set in the SonarQube webhook UI, used for generating the HMAC