SonarQube

Continuous code quality and security inspection.

Overview

SonarQube analyses your source code to find bugs, vulnerabilities and "code smells" that make software hard to maintain. It reports on code coverage and duplication and shows whether a project meets a quality gate.

It supports many languages including Java, JavaScript and Python, and integrates with Jenkins and GitLab CI so that every commit can be checked automatically.

Where it is used

  • Improving code quality in teams
  • Automated code review
  • Security checks in CI
  • Student and training projects

Run SonarQube with Docker

docker run -d --name sonarqube -p 9000:9000 sonarqube:community

# open http://localhost:9000 and log in (the first login uses the default admin account
# and asks you to change the password)

SonarQube

Continuous code quality and security inspection.

Talk to us

Related

Jenkins GitLab ESLint Development Tools

What you will cover

The key topics and features of SonarQube

Bug & Vulnerability Detection

Find problems before they reach production.

Quality Gates

Fail a build when quality rules are not met.

Coverage & Duplication

Track test coverage and repeated code.

Multi-Language Support

Java, JavaScript, Python and more.

CI Integration

Works with Jenkins, GitLab CI and GitHub Actions.

Technical Debt

See how much effort is needed to clean up code.