DevOps Intermediate

What is SonarQube?

A platform for continuous code quality inspection that detects bugs, vulnerabilities, and code smells through static analysis.

SonarQube analyzes source code for quality issues across 30+ programming languages. It identifies bugs, security vulnerabilities, code smells (maintainability issues), duplications, and test coverage gaps.

Quality Gates define pass/fail criteria for builds. Integration with CI/CD pipelines blocks deployments that do not meet quality standards. SonarCloud offers a hosted version for open-source projects.

Related Terms

Continuous Integration and Continuous Deployment — automated practices for building, testing, and deploying code changes.

An endpoint or mechanism that reports whether an application is running correctly and ready to handle requests.

Pipeline as Code

Defining CI/CD pipeline configurations as version-controlled code files rather than through UI-based pipeline builders.

A structured analysis conducted after an incident to understand what happened, why, and how to prevent recurrence — without assigning blame.

A practice where Git repositories serve as the single source of truth for both application code and infrastructure configuration.

Infrastructure as Code (IaC)

The practice of managing infrastructure through machine-readable configuration files rather than manual processes.

View All DevOps Terms →