SonarQube is an open source platform for continuously monitoring code quality. It detects bugs, vulnerabilities, and code smells based on configured quality rules and profiles. Projects can define quality gates that check thresholds for metrics like issues, coverage, and duplications to flag the quality status as passed, warning, or failed. SonarQube allows comparing metrics across versions to track quality over time and supports code processes like nightly and pull request analysis. A community provides support through rule and profile updates, new plugins, and biweekly meetings to discuss quality concerns.
Quality Gates
Set ofboolean conditions per project,
based on measure thresholds.
Passed
Warning
Failed
9.
Quality Gates
Metric Operator
OpenIssues Is greater than 70 100
Blocker Issues Is greater than 0
Dublications Is greater than 0.5 1
New Issues Is greater than 0 10
Overall Coverage Is less than 85 80
Unit Test Failures Is greater than 0
10.
Quality of NewCode
Comparison measures for different versions
Good for long term projects
Tracking quality of code, added in current snapshot
Project Teams
Update projectanalysis frequently
Monitoring Quality of own project
Defining project Quality Gate
Voice and discuss all concerns with Sonar Community
Summary
◉ Start fromsmall: perform analysis
◉ Track code quality everyday
◉ Develop your own standard, or use existing
◉ Organize support process to make SonarQube alive
◉ Transparency 24/7, even for customers