Skip to main content

​
Supported Data Models

​
Onboarding SonarQube / SonarCloud

Follow the steps below to onboard your environment to our SonarQube / SonarCloud integration.
1

Generate a User Token

  1. Log in to your SonarCloud account at sonarcloud.io (or your self-hosted SonarQube instance).
  2. Navigate to My Account by clicking on your profile avatar in the top-right corner.
  3. Go to the Security tab.
  4. Under Generate Tokens, enter a name for your token (e.g., “Leen Integration”) and click Generate. Generate Token
Record your API token somewhere safe. After the token generation window is closed, the token value is no longer visible.
2

Get Your Organization Key

  1. Navigate to your organization’s page in SonarCloud.
  2. The organization key can be found in the URL: https://sonarcloud.io/organizations/{organization-key}/projects
  3. Alternatively, go to Organization Settings and copy the Organization Key. Organization Key
3

Enter Configuration Parameters in Leen

In your Leen integration configuration, provide the following:
ParameterDescriptionRequired
Base URLThe base URL for your SonarQube/SonarCloud instance. Defaults to https://sonarcloud.io for SonarCloud.No
OrganizationYour SonarCloud/SonarQube organization key.Yes
API TokenThe user token generated in Step 1.Yes
For self-hosted SonarQube instances, update the Base URL to point to your instance (e.g., https://sonarqube.yourcompany.com).

​
Required Permissions

The user token must have access to the following:
  • Browse permission on all projects you want to sync
  • Execute Analysis permission (optional, but recommended for complete data access)
For organization-level access, ensure the token belongs to a user who is a member of the organization with appropriate permissions to view all relevant projects.

​
Severity Mapping

SonarQube severities are mapped to Leen’s unified severity model as follows:
SonarQube SeverityLeen Severity
BLOCKERCritical
CRITICALHigh
MAJORMedium
MINORLow
INFOInfo

​
State Mapping

SonarQube issue states are mapped to Leen’s unified state model as follows:
SonarQube Status/ResolutionLeen State
OPEN, CONFIRMEDOpen
REOPENEDReopened
RESOLVED, CLOSEDClosed
FALSE-POSITIVE, WONTFIXIgnored
REMOVEDClosed

​
Data Synced

The SonarQube integration syncs the following data:
  • Issues: Code quality and security issues detected by SonarQube analysis
  • Security Hotspots: Security-sensitive code that requires review
  • Projects/Components: Repository and project information
For any additional information about our field mappings or integrations, please contact us.