scanning sql files using sonarqube for DBOPS repos in ADO while creating build package

[darshmur]

Hello,

We are using DBOPS repos to organize our SQL Scripts in ADO and using CICD pipeline to trigger DBOPS build package after each check-in. We want to use SonarQube to scan our SQL Script files inside repo. We have added SonarQube related tasks in our build definition for that, but its scanning the whole repo in every build, not just the incremental changes. How can we make it possible? We dont want SonarQube to be busy scanning whole repo for every build. Also SonarQube takes lot of time for long sql scripts with lot of inserts and update statements. Please let us know your suggestions.

[nvarscar]

This is not strictly a DBOps problem, but if you want to scan only a limited number of files, on way could be to extract those files from the package artifact. You can either unzip it (the package is just a zip archive, after all) and test the files from the latest build version, or you can extract file names and only test those files in the current CI build:

$pkg = Get-DBOPackage .\mypackage.zip
$pkg.GetBuild('1.0').Scripts.Name

[darshmur]

For incremental scanning, i think we need to get the list of newly check-in files into the ADO Repo along with their location. Do you agree? According to you it should be possible through powershell scripting?