Jump to content

SonarQube

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by PabloStraub (talk | contribs) at 20:15, 30 September 2018 (Overview). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

SonarQube
Developer(s)SonarSource
Stable release
6.7 / November 8, 2017; 7 years ago (2017-11-08)
Repository
Written inJava
Operating systemCross-platform
TypeStatic program analysis
LicenseLesser GNU General Public License
Websitesonarqube.org

SonarQube (formerly Sonar)[1] is an open source platform developed by SonarSource for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs, code smells, and security vulnerabilities on 20+ programming languages. SonarQube offers reports on duplicated code, coding standards, unit tests, code coverage, code complexity, comments, bugs, and security vulnerabilities.[2][3]

SonarQube can record metrics history and provides evolution graphs. SonarQube's provides fully automated analysis and integration with Maven, Ant, Gradle, MSBuild and continuous integration tools (Atlassian Bamboo, Jenkins, Hudson, etc.).[4][5][6]

Overview

SonarQube includes support for the programming languages Java (including Android), C#, PHP, JavaScript, C/C++, COBOL, PL/SQL, PL/I, ABAP, VB.NET, VB6, Python, RPG, Flex, Objective-C, Swift, Web, and XML.[7] Some of these are only available via a commercial license.

SonarQube is available for free under the GNU Lesser General Public License. An enterprise version for paid licensing also exists, as well as a data center edition that supports high availability.[8][9]

SonarQube integrates with Eclipse, Visual Studio, and IntelliJ IDEA development environments through the SonarLint plug-ins, and also integrates with external tools like LDAP, Active Directory, GitHub, and others. SonarQube is expandable with the use of plug-ins.[10][11]

Reception

In 2009, SonarQube received the Jolt Awards under testing tools category.[12][13]

See also

References

  1. ^ Freddy Mallet (20 March 2013). "SONAR is becoming SONARQUBE". SonarQube project mailing list. Retrieved 3 July 2013.
  2. ^ "Methods and Tools issue" (PDF). 2010-03-01. Retrieved 2017-08-29.
  3. ^ Campell/Papapetrou, Ann/Patroklos (2013). Sonar (SonarQube) in action. Greenwich, Connecticut, USA: Manning Publications. p. 350. ISBN 978-1617290954.
  4. ^ Buijze, Allard (2010-02-26). "Measuring Code Quality With Sonar". Retrieved 2017-08-29.
  5. ^ Odendaal, René (2009-06-24). "Continuous Integration on SAP using Subversion, Maven, Hudson, Nexus and Sonar". Retrieved 2017-08-29.
  6. ^ Smart, John (2010-03-14). "How can you improve, harmonize and automate your development process using tools like Maven, Hudson, and Nexus?". Retrieved 2017-08-29.
  7. ^ "Multi-Language | SonarQube". Retrieved 2017-11-25.
  8. ^ "License | SonarQube". www.sonarqube.org. Retrieved 2018-03-28.
  9. ^ "Plans & Pricing | SonarSource". www.sonarsource.com. Retrieved 2018-03-28.
  10. ^ Mariano (2009-11-17). "Creating a Sonar Plugin for software development metrics". Archived from the original on March 24, 2010. Retrieved 2017-08-29. {{cite web}}: Unknown parameter |deadurl= ignored (|url-status= suggested) (help)
  11. ^ Hazrati, Vikas (2010-03-30). "Monetizing the Technical Debt". Retrieved 2017-08-29.
  12. ^ "Jolt Awards Winners". 2009-03-18. Archived from the original on February 1, 2010. Retrieved 2010-04-13. {{cite web}}: Unknown parameter |deadurl= ignored (|url-status= suggested) (help)
  13. ^ "Jolt Productivity Award #2: Testing and Debugging". 2010-12-01. Retrieved 2010-12-09.

Further reading