[PSA] SonarCloud Termination

What is this about?

TL;DR → SonarCloud will be terminated on 11 January 2025

(Link to ADR) SonarCloud is currently used for (1) Security Scanning, (2) Unit Test Coverage Guardrail, and (3) Code Smell/Quality. Traveloka’s current SonarCloud contract will expire in Jan 2025, hence if we are to continue using SonarCloud, then we have to renew our contract. SonarCloud recently introduced a new pricing plan, including a new Enterprise Plan. They are forcing us to migrate to Enterprise Plan because they claimed that they deprecated the previous plan that we’ve been using. Based on the pricing quote, we need to pay up-to $137,000 per year, which is a huge jump from what we’ve been paying SonarCloud – EUR 75,000. We do not think that this cost makes sense for the functionalities that we use as we have no requirement that need any of the new feature on SonarCloud Enterprise Plan. Moreover, we can replace the functionalities with alternative open-source/free solutions and we believe that we can roll them out as quickly as possible.

Who is this announcement for?

All teams who integrate their repositories to SonarCloud.

What do you need to do?

None, all actions items will be executed by Central Teams.

Timeline

31 Dec 2024:

BEI to roll-out the new Unit Test Coverage Guardrail to all backend repositories
InfoSec team to roll-out Security Scanning via SemGrep to all repositories
Central teams to remove SonarCloud Required Status Checks from all repositories

11 Jan 2025:

SonarCloud is terminated

Questions/Concerns?

Should you have any question/concern, feel free to reach out to either:

TechOps: @U08G58KL3
InfoSec: @UHR3A023V
Product Infra: @U98ABKFC6, @U08RQM6EQ, @U890J4W3V