SonarQube

Team # 1
18L-2008 Aliya Farooq
Abdul Rehman
 Introduction
• Open source tool for testing quality
• Continuous inspection
• Static analysis of code
• Detects bugs, code smells and security vulnerabilities.
• Addresses coding rules, test coverage, duplications, API
documentation, complexity, and architecture
• Dashboard interface
• Support 20+ languages
• Web-based application
• Keeps historical data of a variety of metrics
 Quality requirements
• Any new code should be covered by unit tests
• New methods must not have complexity over
a certain threshold
• No cycles between packages should be
introduced
• No code duplication should be added to the
source code
• …
Demonstration
 Advantages
• Easy to drill down to see the individual problems
• Bigger picture of project become clear
• Able to see larger problem areas
• Large set of technologies and languages supported
• Easy to install and configure
• Implementation of coding conventions becomes easy
• Support multiple operating systems
 Disadvantages
• Costly – plugins, licensing the enterprise
model.
• installation requires separate database and
application server.
• Community edition does not cover branch
analysis, executive reporting and detection of
injection flaws.
References