๐ŸŽ New User? Get 20% off your first purchase with code NEWUSER20 ยท โšก Instant download ยท ๐Ÿ”’ Secure checkout Register Now โ†’
Menu

Categories

DevOps Intermediate

What is SonarQube?

A platform for continuous code quality inspection that detects bugs, vulnerabilities, and code smells through static analysis.

SonarQube analyzes source code for quality issues across 30+ programming languages. It identifies bugs, security vulnerabilities, code smells (maintainability issues), duplications, and test coverage gaps.

Quality Gates define pass/fail criteria for builds. Integration with CI/CD pipelines blocks deployments that do not meet quality standards. SonarCloud offers a hosted version for open-source projects.

Related Terms

Artifact
A packaged, versioned output of a build process โ€” such as a Docker image, JAR file, or compiled binary โ€” ready for deployment.
Istio
An open-source service mesh that provides traffic management, security, and observability for microservices on Kubernetes.
Trunk-Based Development
A source control strategy where developers integrate small changes directly into the main branch frequently, often multiple times per day.
Log Aggregation
The process of collecting, centralizing, and indexing log data from multiple sources for unified search and analysis.
Makefile
A file containing build rules and commands that automates compilation and common project tasks using the make utility.
Continuous Deployment
A practice where every code change that passes automated tests is automatically deployed to production.
View All DevOps Terms โ†’