| - develop
| ```
|
-| **Note:** A project key has to be provided through `sonar-project.properties` or through the command line parameter. For more information, see the [SonarScanner](/analysis/scan/sonarscanner/) documentation.
+|
+| **Project key**
+| A project key has to be provided through `sonar-project.properties` or through the command line parameter. For more information, see the [SonarScanner](/analysis/scan/sonarscanner/) documentation.
+|
+| **Self-signed certificates**
+| If you secure your SonarQube instance with a self-signed certificate, you may need to build a custom image based on `sonarsource/sonar-scanner-cli`. See the section **Advanced Docker Configuration** within the [SonarScanner](/analysis/scan/sonarscanner/) documentation.
+|
#### **Failing the pipeline job when the Quality Gate fails**
In order for the Quality Gate to fail on the GitLab side when it fails on the SonarQube side, the scanner needs to wait for the SonarQube Quality Gate status. To enable this, set the `sonar.qualitygate.wait=true` parameter in the `.gitlab-ci.yml` file.
[[collapse]]
| ## Linking issues
-| During pull request decoration, individual issues will be linked to their SonarQube counterparts automatically. For this to work correctly, you need to set the instance's **Server base URL** (**[Administration > Configuration > General Settings > General > General](/#sonarqube-admin#/admin/settings/)**) correctly. Otherwise, the links will default to `localhost`.
\ No newline at end of file
+| During pull request decoration, individual issues will be linked to their SonarQube counterparts automatically. For this to work correctly, you need to set the instance's **Server base URL** (**[Administration > Configuration > General Settings > General > General](/#sonarqube-admin#/admin/settings/)**) correctly. Otherwise, the links will default to `localhost`.
| -v `pwd`/cacerts:/opt/java/openjdk/lib/security/cacerts \
| sonarsource/sonar-scanner-cli
| ```
+|
+| Alternatively, you can create your own container that includes the modified `cacerts` file. Create a `Dockerfile` with the following contents:
+|
+| ```
+| FROM sonarsource/sonar-scanner-cli
+| COPY cacerts /opt/java/openjdk/lib/security/cacerts
+| ```
+|
+| Then, assuming both the `cacerts` and `Dockerfile` are in the current directory, create the new image with a command such as:
+| ```
+| docker build --tag our-custom/sonar-scanner-cli .
+| ```
+|
## Troubleshooting
**Java heap space error or java.lang.OutOfMemoryError**
**Property missing: `sonar.cs.analyzer.projectOutPaths'. No protobuf files will be loaded for this project.**
Scanner CLI is not able to analyze .NET projects. Please, use the SonarScanner for .NET. If you are running the SonarScanner for .NET, ensure that you are not hitting a known limitation.
-