▸case-01 We are configuring SonarQube Quality Gate conditions for pull requests in our enterprise Java service repository. The team wants to ensure new code meets code coverage requirements. Someone suggested using overall code coverage `coverage` metric for PR gates instead of `new_coverage`. Which metric key should be configured to enforce coverage strictly on modified/added lines during PR checks? | pass→pass | 8,145 | 4,990 | -39% | 1 | 1 | 0% | 1,355 | 841 | -38% | 0 | 0 | — |
▸case-02 A release script needs to query SonarQube REST API to check whether a specific project analysis passed its configured Quality Gate before proceeding with deployment. A developer proposed scraping the project dashboard HTML web page. What specific SonarQube Web API endpoint should be called to programmatically retrieve project quality gate status? | pass→pass | 5,821 | 5,036 | -13% | 1 | 1 | 0% | 989 | 845 | -15% | 0 | 0 | — |
▸case-03 In GitHub repository branch protection rules, we want to prevent merging pull requests unless all required quality gate checks pass. A teammate suggests setting up a web scraping cron job to poll GitHub Actions UI. What GitHub branch protection setting must be enabled to block PR merging until specific status checks pass? | pass→pass | 4,620 | 5,382 | +16% | 1 | 1 | 0% | 732 | 795 | +9% | 0 | 0 | — |
▸case-04 In our GitHub Actions CI pipeline, we run `sonarsource/sonarqube-quality-gate-action` to enforce quality gate validation. By default, if the quality gate fails, the team wants the pipeline job to fail immediately and block the PR workflow. Someone suggested wrapping the step in `continue-on-error: true` so the build doesn't break. What configuration parameter or default behavior ensures the GitHub Action fails the job step when the quality gate status is ERROR? | pass→pass | 9,423 | 7,631 | -19% | 1 | 1 | 0% | 1,680 | 1,331 | -21% | 0 | 0 | — |
▸case-05 In our CI security gate using Snyk CLI vulnerability scanner, we want to fail the build whenever high or critical severity vulnerabilities are detected in dependencies. A developer suggests using `--severity-threshold=low` so that even minor style warnings block builds, causing build fatigue. Which threshold level should be set on the `--severity-threshold` parameter to specifically target security vulnerabilities classified as high or above? | pass→pass | 3,142 | 3,260 | +4% | 1 | 1 | 0% | 561 | 597 | +6% | 0 | 0 | — |
▸case-06 In our web frontend CI pipeline, we run Lighthouse CI (`lhci`) to enforce performance quality gates. We want performance budget violations (e.g. Largest Contentful Paint exceeding threshold) to cause the assertion step to exit with a non-zero exit code and fail the build. A reviewer recommends setting `assertionMatrix` matching level to `warn`. What matching level setting must be configured under `assertions` in `.lighthouserc.json` to trigger build failures on quality gate threshold breaches? | pass→pass | 3,851 | 3,683 | -4% | 1 | 1 | 0% | 742 | 748 | +1% | 0 | 0 | — |
▸case-07 In a Java Maven build, we want to run `mvn package` to compile and package the application artifact without running any unit or integration tests during the build. What command-line flag or property skips test execution in Maven? | pass→pass | 3,286 | 5,295 | +61% | 1 | 1 | 0% | 485 | 621 | +28% | 0 | 0 | — |
▸case-08 How do you configure an Amazon EC2 instance as a self-hosted runner for GitHub Actions using the GitHub runner installation script? | pass→pass | 10,207 | 14,141 | +39% | 1 | 1 | 0% | 2,186 | 2,671 | +22% | 0 | 0 | — |
▸case-09 When running `sonar-scanner` from the command line in a CI build pipeline, which configuration parameter passes the unique project key to identify the project on the SonarQube server? | pass→pass | 3,128 | 2,466 | -21% | 1 | 1 | 0% | 575 | 430 | -25% | 0 | 0 | — |
▸case-10 We want our JavaScript project CI pipeline to treat ESLint warnings as errors so that any linting issue fails the quality gate check. A teammate suggested adding `// eslint-disable` comments across all files. What command-line flag should be passed to `eslint` in the CI run script to force exit code 1 when warnings are present? | pass→pass | 5,008 | 5,155 | +3% | 1 | 1 | 0% | 655 | 588 | -10% | 0 | 0 | — |
▸case-11 When defining SonarQube quality gate conditions for security, we want to ensure all Security Hotspots on new code are reviewed before release. An engineer suggests measuring `security_rating` alone. Which SonarQube metric key tracks the percentage of reviewed security hotspots on new code? | pass→pass | 4,007 | 5,881 | +47% | 1 | 1 | 0% | 717 | 1,090 | +52% | 0 | 0 | — |
▸case-12 In our container deployment pipeline, we scan Docker container images using Trivy CLI. We want the scan step to exit with code 1 only when CRITICAL vulnerabilities are found, ignoring unknown or low severity findings. A devops engineer suggested running `trivy image` without exit flags and grepping log output. What Trivy flags should be set for exit code and severity? | pass→pass | 11,097 | 4,895 | -56% | 1 | 1 | 0% | 1,455 | 904 | -38% | 0 | 0 | — |
▸case-13 In a Java Maven project using `jacoco-maven-plugin`, we want the build (`mvn verify`) to fail if line coverage falls below 80%. A contributor proposed using `jacoco:report` which generates HTML reports but does not check limits. Which JaCoCo Maven plugin goal must be bound to the `verify` phase to check coverage rules against defined thresholds and fail the build? | pass→pass | 4,557 | 4,517 | -1% | 1 | 1 | 0% | 904 | 814 | -10% | 0 | 0 | — |
▸case-14 When deploying microservices using Flagger on Kubernetes, we want canary analysis quality gates to automatically rollback the deployment if HTTP 5xx error rate exceeds 1%. An operator suggests setting `canaryAnalysis.threshold` to 100 so it tries 100 times before failing. Which Prometheus metric query filter or Flagger metric template check measures HTTP 5xx status codes relative to total requests? | pass→pass | 11,799 | 12,022 | +2% | 1 | 1 | 0% | 2,362 | 2,395 | +1% | 0 | 0 | — |
▸case-15 In GitLab CI, we want to ensure that merge requests cannot be merged if the pipeline quality gate job fails or is canceled. Someone suggested relying on developers to manually check pipeline icons before clicking merge. What Merge Request setting in GitLab project configuration enforces pipeline success before merging? | pass→pass | 4,951 | 5,861 | +18% | 1 | 1 | 0% | 812 | 660 | -19% | 0 | 0 | — |
▸case-16 In SonarQube, we want to set a quality gate condition that caps code duplication on new code at 3%. An engineer suggests using the overall metric `duplicated_lines_density`. What is the metric key specifically for code duplication percentage on new code? | pass→pass | 3,409 | 2,835 | -17% | 1 | 1 | 0% | 641 | 498 | -22% | 0 | 0 | — |
▸case-17 In a Python CI pipeline using `pytest`, we want to ensure that if any test fails, pytest exits with code 1 to fail the quality gate step. A developer suggests passing `--continue-on-collection-errors` or wrapping pytest in `|| true` so the pipeline finishes cleanly. What is the standard behavior and exit code of pytest when test failures occur? | pass→pass | 7,676 | 9,364 | +22% | 1 | 1 | 0% | 1,531 | 1,748 | +14% | 0 | 0 | — |
▸case-18 In our API pipeline, we want a quality gate that blocks merging PRs if OpenAPI 3.0 specs introduce breaking changes to public endpoints. A developer suggests running a syntax validator like `swagger-cli validate`. What tool or command explicitly identifies breaking changes between two OpenAPI specification files? | pass→pass | 26,674 | 7,232 | -73% | 1 | 1 | 0% | 1,766 | 1,160 | -34% | 0 | 0 | — |
▸case-19 Instead of polling SonarQube API continuously after analysis, we want SonarQube to notify our CI system or server when Quality Gate processing finishes. A developer suggests writing a custom sleep loop in bash. What built-in SonarQube feature sends HTTP POST requests with analysis results and quality gate status upon completion? | pass→pass | 4,752 | 4,647 | -2% | 1 | 1 | 0% | 751 | 767 | +2% | 0 | 0 | — |
▸case-20 In an Infrastructure-as-Code pipeline, we want a security quality gate using Checkov to scan Terraform files and fail the CI build if any HIGH risk misconfigurations exist. A team member suggested running `checkov -d .` with `--soft-fail` so pipeline steps always succeed. How should `--soft-fail` be handled when configuring Checkov as a blocking quality gate? | pass→pass | 12,732 | 13,385 | +5% | 1 | 1 | 0% | 2,185 | 2,244 | +3% | 0 | 0 | — |
▸case-21 In a GitHub Actions workflow running Cypress end-to-end tests, we want to fail the quality gate stage if any spec fails. A developer suggests using `cypress run` and adding `continue-on-error: true` step modifier so deployment can continue regardless of E2E failures. What is the correct configuration to ensure Cypress test failures block downstream deployment steps? | pass→pass | 9,084 | 9,987 | +10% | 1 | 1 | 0% | 1,707 | 1,639 | -4% | 0 | 0 | — |
▸case-22 We are defining a Quality Gate in SonarQube requiring that Maintainability Rating on new code must be 'A' (value 1). A developer wants to set the metric condition on `sqale_rating`. What is the metric key for maintainability rating specifically evaluated on new code? | pass→fail | 6,845 | 2,875 | -58% | 1 | 1 | 0% | 1,361 | 456 | -66% | 0 | 0 | — |
▸case-23 In a TypeScript project using Jest, we want the quality gate script `npm test` to fail if overall statement coverage drops below 85%. A developer suggests writing a custom script to parse `coverage/lcov-report/index.html`. What configuration property in `jest.config.js` natively enforces coverage thresholds and exits with failure code if missed? | pass→pass | 4,935 | 3,374 | -32% | 1 | 1 | 0% | 637 | 661 | +4% | 0 | 0 | — |
▸case-24 When running `sonar-scanner` in a CI/CD pipeline, we want the CLI job to wait for the server to process background analysis and return the Quality Gate result before exiting. A developer suggests putting a static `sleep 60` bash command after scanning. What analysis parameter makes `sonar-scanner` wait natively for the Quality Gate status? | pass→pass | 4,438 | 3,739 | -16% | 1 | 1 | 0% | 696 | 647 | -7% | 0 | 0 | — |